[syslog-ng] Syslog-ng 3.9

[Scot]

DNS ?  What if you used the IP address as a test?
Is Jasper-MLX-Security what is being set in the HOST header ?


On Tue, Jun 27, 2017 at 2:23 PM, PENLAND,MATTHEW & DANA <matt at etcmail.com>
wrote:

> I have several systems that are sending there log files to syslog-ng,
> without issue. I having an issue getting syslog-ng to work with logs from
> our Brocade MLX’s. I run wireshark on the syslog server and see the file
> hit it. However, syslog-ng does not put it in its folder or any where else.
>
>
> Sections of the config file relevant to the Brocade.
>
> destination d_bro { file("/home/hosts/brocade/$YEAR$MONTH$DAY-$HOST.log");
> };
>
>
> #####################
> # BROCADE
> #####################
>
> filter f_bro  { not level(debug) and (
>                   host( "BROCADE-BG-MLX" ) or
>                   host( "BROCADE-BG-FESX" ) or
>                   host( "BROCADE-BR-MLX" ) or
>                   host( "BROCADE-DUCK-FESX" ) or
>                   host( "BROCADE-ELJY-MLX" ) or
>                   host( "BROCADE-JSPR-MLX" ) or
>                   host( "BROCADE-STUDIO-FESX" ));};
>
> log { source(s_net); filter(f_bro); destination(d_bro); };
>
>
> Wireshark on the server - Capture.PNG
>
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20170627/839ff2c8/attachment.html>