[syslog-ng] Forwarding Syslog-ng Messages

[Balazs Scheidler]

On Tue, 2012-01-17 at 14:41 +0100, Michael Kolowicz wrote:
> Hello,
> 
>  
> 
> I want to forward incomming messages to a "LiveMonitor"-Application
> which is running on a remote machine and listening on UDP-Port 1514. 
> I have create a destination "{udp("192.168.2.122" port (1514));}" but
> my Monitor-Application didn´t recieve messages (I using Syslog-ng
> 3.2.5 on ubuntu 10.04)
> If I sending direct to my application then I see the messages - is my
> destination configuration wrong?
> 
>  
> 
> Here my Configuration
> 
> source s_udp     {udp(port(514));};
> destination d_udp1514  {udp("192.168.2.108" port (1514);
> keep-hostname(););};


The config has syntax errors, it should read like this:

destination d_udp1514  {udp("192.168.2.108" port (1514));};

keep-hostname() is not a valid destination option, it is related to source drivers instead.

> destination d_SYSLOG   { file("/var/log/syslog");};
> log  { source(s_udp); destination(d_udp1514);
> destination(d_SYSLOG); }; 
> 
> I have run Whireshark on the System with the application and I see no
> incoming messages
> 
>  
> 
> The the log messages are being written to /var/log/syslog? 
> 
>  
> 
> Freundliche Grüße / Best regards
> 
>  
> 
> 
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
> 

-- 
Bazsi