[syslog-ng] local6 doesn't seem to work...

Geller, Sandor (IT) Sandor.Geller at morganstanley.com
Wed Jun 4 13:32:26 CEST 2008


> Hi,
> When I have the following in syslog-ng.conf:
> filter f_cyrus   { level(warn, err, crit) and facility(local6); };
> destination cyrus { file("/var/log/cyrus.log"); };
> log { source(src); filter(f_cyrus); destination(cyrus); };
> nothing is being logged in /var/log/cyrus.log
> however when I use:
> filter f_cyrus   { level(warn, err, crit) and match("imap"); };
> it works fine, why is local6 not working??
> (cyrus-imap is default compiled with local6 enabled)

Well, are you sure that cyrus really uses local6? You can check
this easily by adding a template to your config like this:

destination cyrus {
        file("/var/log/cyrus.log" template("$TAG $MSG\n"));

And then check what $TAG is when there are log lines.



NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.

More information about the syslog-ng mailing list