Bugger. Every which way I enter it 1. As is 2. Nominating the IP as either 0.0.0.0 or localhost or (PC to where data is being sent IP) (device IP)
The error is always the same on re-start What ever line the source.......etc. is on will not parse and the file will not load. Please don't spend any more time on this. There are so many other than need your help. I have subscribed to support community email for developers syslog-ng at http://www.balabit.com/. If ever I work it out I will send you a quick not as to why what appears perfect in my and your logic - and follows the documentation to the letter does not work as simply as it should - as the doc tells us. Good luck and I keep you in thought and thanks for your time. Scott :-[ Darryl Gregorash wrote: > On 2007-05-22 17:43, Registration Account wrote: > >> Darryl I tested yesterday with the space and there is no difference. >> >> I did however make some progress with the following >> >> source src { unix-stream("/var/log/skot"); internal(); udp(ip(0.0.0.0) >> port(514)); }; >> >> > That is definitely not right. Your source is the udp port only, and the > file /var/log/skot is not a Unix stream. > > You definitely do not want to include the UDP source in the one that > comes in the .conf file, because you wish to have separate output. Make > your own source, it is much easier (you don't have to create any filters > this way): > > 1. remove the udp stuff from "source src ....". > > 2. then add the following three into the .conf file: > > source my_src { udp(ip(0.0.0.0) port 514); }; > > (Note here that you can bind this to a specific device, if that device > will have a fixed IP.) > > destination my_dest { file("/var/log/skot" ); }; > log { source(my_src); destination(my_dest); }; > > 3. finally, as root "rcsyslog reload" > > >
smime.p7s
Description: S/MIME Cryptographic Signature
