The company I work for make automated machines for fabricating eyeglass lenses. We want to use a general purpose Linux server we have to log test data from some new machines we have developed. They will be running overnight tests and we can have them spit out data out on UDP port 514 and use syslogd to grab the data.
We can successfully send/receive the data from our machine to the server. The messages are punt int /var/log/syslog, /var/log/debug, & /var/log/messages. What I need help figuring out is how to configure syslog.conf to put dump the incoming messages to their own unique files.

Anyone with any thoughts?

Chris

Either post-process it or use a filtering syslog like Syslog-NG?

You need to know the FACILITY and PRIORITY of the messages. Syslog allows selection of output device based on the facility and priority of the syslog message. This is often configurable by application. And applications often use one of the LOCAL0-LOCAL7 facilities, so it might be an easy configuration. Can you determine which facilty/priority ?

If the facility and priority are also in use by other linux programs, you wont' be able to for your apps messages into one location, while leaving the others alone. This is a limitation in syslog.

You can use syslog-ng (or other alternatives), or trivial log processing.