Re: [loganalysis] syslog-ng (FA?)Q

From: Balazs Scheidler (bazsiat_private)
Date: Mon Sep 03 2001 - 12:33:10 PDT

  • Next message: Alex Stamos: "RE: [loganalysis] Console Program"

    On Fri, Aug 31, 2001 at 04:08:34PM -0700, Mike Hoskins wrote:
    > 
    > Working on getting syslog-ng up and running.  It's built, installed, and
    > the general syntax for getting local logs working seems straightforward.
    > 
    > However, I'm trying to get a remote host to relay messages to my
    > centralized loghost using the following destination and log statements:
    > 
    > destination ciscol      { file("/var/log/cisco.log"); };
    > destination ciscor      { tcp(ip(10.0.100.12) port(514);); };
    > log { source(src1); filter(ciscof); destination(ciscol); \
    > 	destination(ciscor);};
    > 
    > Syslog-ng doesn't seem to like tcp(); within the destination clause, yet
    > the documentation on their site seems to imply this should work.  To
    > anyone else that's already done this...  What am I doing wrong?
    
    destination and source tcp syntax differs (because destinations have a
    required parameter while sources don't) the correct syntax is:
    
    destination ciscor { tcp(10.0.100.12 port(514)); };
    
    -- 
    Bazsi
    PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    



    This archive was generated by hypermail 2b30 : Tue Sep 04 2001 - 11:49:36 PDT