[syslog-ng] [Bug 218] New: To include local*.* facility. level in the source of syslog-ng

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=218

           Summary: To include local*.* facility.level  in the source of
                    syslog-ng
           Product: syslog-ng
           Version: 3.2.x
          Platform: Other
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: jk_kathi1 at yahoo.com
Type of the Report: ---
   Estimated Hours: 0.0


We have oracle audits configured to send updates to local0.info  facility.level  
and the existing syslog.conf ( solaris syslgod ) has a feature to include them  in 

local6.info   /var/log/syslog 

We are replacing syslogd with syslog-ng and need to replicate this property
I have searched the syslog-ng documentation and there is not mention of  including local6.info   in the source  section of syslog-ng.conf.
I can use it in the filter section , but the source itself is not getting updated so filter option may be unused.

I can source a file   but the audit logs does not write to a file , they write to  proprietary syslog's facility.level 

Is there a solution , i have hit a road block

Any information , documentation of how i can include the facility.level  into syslog-ng would be helpful

source s_local { system(); sun-streams("/dev/log" door("/etc/.syslog_door")); };
# Filters
#filter f_local6 { facility(local6); };

Do i include any other keywords apart from system  in the source s_local line

Thanks


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.