[syslog-ng] Syslog-ng 3.9

[PENLAND,MATTHEW & DANA]

I have several systems that are sending there log files to syslog-ng, without issue. I having an issue getting syslog-ng to work with logs from our Brocade MLX’s. I run wireshark on the syslog server and see the file hit it. However, syslog-ng does not put it in its folder or any where else.


Sections of the config file relevant to the Brocade.

destination d_bro { file("/home/hosts/brocade/$YEAR$MONTH$DAY-$HOST.log"); };


#####################
# BROCADE
#####################

filter f_bro  { not level(debug) and (
                  host( "BROCADE-BG-MLX" ) or
                  host( "BROCADE-BG-FESX" ) or
                  host( "BROCADE-BR-MLX" ) or
                  host( "BROCADE-DUCK-FESX" ) or
                  host( "BROCADE-ELJY-MLX" ) or
                  host( "BROCADE-JSPR-MLX" ) or
                  host( "BROCADE-STUDIO-FESX" ));};

log { source(s_net); filter(f_bro); destination(d_bro); };


Wireshark on the server - Capture.PNG
 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Capture.PNG
Type: image/png
Size: 55835 bytes
Desc: not available
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20170627/515359e6/attachment-0001.png>