[syslog-ng] Syslog proxy/relay encapsulates

Michael Yacc yuolvka at gmail.com
Sat Sep 6 23:05:36 CEST 2014


Dear all,
I'm trying  to configure syslog-ng as relay/proxy server. Seems to be
simple, but syslog server recieves encapsulated original syslog messages
within outgoing "syslog-relay" messages.
Is there any way to configure syslog-ng (relay) to just forward orignal
messages to syslog server?

Syslog-ng version used: 3.3.9

*syslog-client$* logger "hello from syslog client"

on syslog-relay I added the following configuration:

######## sources ###############
source s_relay_port {
        udp(ip(0.0.0.0) port(514));
};

######## destinations ###############
destination d_syslog_server {
        syslog("syslog-server" transport("udp") port(514));
};

######## logging ###############
log {
        source(s_relay_port);
        destination(d_syslog_server);
};


*syslog-server$* tail -F /var/log/syslog

Sep  6 23:53:28 syslog-relay-ip 1 2014-09-06T23:53:28+03:00
syslog-client-ip 1 - - - 2014-09-06T23:53:28+03:00 syslog-client-hostname
root - - [meta sequenceId="38"] hello from syslog client


With best regards,
Michael Yacc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140907/ed5dbf85/attachment.htm 


More information about the syslog-ng mailing list