How can I get syslog-ng to put the logs in seperate files instead of tcpsyslog-ng.all

abefroman · 04-13-2008, 12:34 PM

How can I get syslog-ng to put the logs in seperate files instead of tcpsyslog-ng.all?

Is it possible to seperate by server and log?

Ex:
server1/secure
server1/kernel.log
server2/secure
server2/kernel.log
or
server1.secure
server1.kernel.log
server2.secure
server2.kernel.log

TIA!

acid_kewpie · 04-13-2008, 04:20 PM

sure, jsut use the $host variable as a directory or such like, it's all very implicit. you'll need to ensure that you have create_dirs(yes) to automatically sort that out, but just change the file destination to suit your needs.

abefroman · 04-13-2008, 09:50 PM

Thanks! That worked.

Now I am using:
destination tcplocalhost {
file("/var/log/$HOST/$FACILITY-tcpsyslog-ng.all");
};

abefroman · 04-14-2008, 09:14 AM

Quote:

Originally Posted by acid_kewpie

sure, jsut use the $host variable as a directory or such like, it's all very implicit. you'll need to ensure that you have create_dirs(yes) to automatically sort that out, but just change the file destination to suit your needs.

Question, I have the free version install now, are you using the free or paid version of syslog-ng?

acid_kewpie · 04-14-2008, 10:55 AM

I'm using about 1000 copies of the open source branch.