[syslog-ng] Remote tags

Nikolay P nikolay.p at cos.flag.org
Fri Nov 21 22:31:58 CET 2014


Hi, list.

Could anyone here advice me if it is possible to set a tags() on a log entry on one machine, send this log message to a remote syslog-ng and use this tags() in a filter on the remote machine?

So that on machine 1:

source src { internal( tags("computer", "test") ) };
destination rem { udp("example.org" port(514)); };
log { source(src); destination(rem) };

And on machine 2 (example.org):

source rem { udp(ip("0.0.0.0") port(514)); };
filter f_tag_test{ tags("test") };
destination test_dest { file("/var/log/test.log"); };
log { source(rem); filter(f_tag_test); destination(test_dest) };

So, should I be able to read tags ("computer" and "test") set by machine 1 on machine 2?


More information about the syslog-ng mailing list