[syslog-ng] syslog-ng's enigmatic logging behavior ?

Eiji Inatsu le.petit.planet at gmail.com
Tue Nov 27 05:30:37 CET 2007


I encoutered a problem about message filtering or macro or ???.
I want to fix this problem. please help me.

# uname -a
SunOS hogehoge 5.10 Generic_125100-07 sun4u sparc SUNW,Sun-Fire-V245
# syslog-ng -V
syslog-ng 2.0.2

# cat syslog-ng
options {create_dirs(yes); use_fqdn(yes); dir_owner(syslog-ng);
dir_perm(0750); owner(syslog-ng); perm(0740); sync(0);};
source s_net { udp(ip( port(514)); };
log { source(s_net); filter(f_fw_1); destination(d_fw_1); flags(final); };
filter f_fw_all { host("DC_"); };
filter f_fw_1 { filter(f_fw_all) and host("ifw1"); };
destination d_fw_1 {
dir_group(fw-log) group(fw-log)); };
destination d_debug_all {
dir_group(all-log) group(all-log)); };
log { source(s_net); destination(d_debug_all); flags(final);};
# grep -v ^# syslog-ng.conf | wc -l
# grep DC_fw /etc/inet/hosts     DC_ifw1

A message is loged to d_fw_1 and a message is loged to d_debug_all.
The filename of a message loged to d_fw_1 is DC_ifw120071127-12 and
the filename of a message loged d_debug_all is
I think all messages should only be loged to d_fw_1, but doesn't.
I want to know what should I do to fix to my problem.

// mailto: le.petit.planet at gmail.com

More information about the syslog-ng mailing list