[syslog-ng] problem to filter remote-logs on syslog-server

system at ra-schaal.de system at ra-schaal.de
Wed Jun 8 12:10:53 CEST 2011


Am 08.06.2011 11:22, schrieb Gergely Nagy:
> That's because you have two sources that both try to listen on udp port
> 514, which will not work.
> 
> A better solution would be to remove it from the src source, and use two
> sources in the log path.
> 
> Something like this:
> 
> source src {internal();
>             unix-dgram("/dev/log");
>             unix-dgram("/var/lib/named/dev/log");
>            };
> source network { udp(port(514)); };
> 
> log { source(src); source(network); filter(f_foo); destination(d_foo); };
> 

thanks. i removed source network. everything is working as expected now.


More information about the syslog-ng mailing list