[syslog-ng] destination based on custom field question

[Gergely Nagy]

On Fri, 2011-01-07 at 11:58 -0500, Christopher Barry wrote: 
> syslog-ng (2.0.9-4.2) is the packaged version in Ubuntu 10.04. Can I use
> this version to create the patterns that have been mentioned in this
> thread, or do I need to pull down a newer (3.x) .deb from balabit? If a
> newer one is appropriate or required, which version is recommended?

I would strongly recommend 3.x. Debian has 3.1.3, and that version will
probably work just fine on Ubuntu 10.04 (haven't tried, you might need
to recompile in the worst case).

-- 
|8]