[syslog-ng] local6 doesn't seem to work...

[Geller, Sandor (IT)]

Hi,

> Hi,
>
> When I have the following in syslog-ng.conf:
>
> filter f_cyrus   { level(warn, err, crit) and facility(local6); };
> destination cyrus { file("/var/log/cyrus.log"); };
> log { source(src); filter(f_cyrus); destination(cyrus); };
>
> nothing is being logged in /var/log/cyrus.log
>
> however when I use:
>
> filter f_cyrus   { level(warn, err, crit) and match("imap"); };
>
> it works fine, why is local6 not working??
>
> (cyrus-imap is default compiled with local6 enabled)

Well, are you sure that cyrus really uses local6? You can check
this easily by adding a template to your config like this:

destination cyrus {
        file("/var/log/cyrus.log" template("$TAG $MSG\n"));
};

And then check what $TAG is when there are log lines.

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.