+ Logging, Syslog and Log Anaylsys Forums » Forums » Syslog & syslogd
|-+ 

syslog-ng.conf Client Config not working

Username:
Password:
News:

Pages: [1]
0 Members and 1 Guest are viewing this topic. Topic Tools  
Read November 06, 2008, 10:52:20 am #0
jdenver47

syslog-ng.conf Client Config not working

Hello All,

I am trying to implement centralised logging via syslog-ng.Here are my details

On my server I succesfully installed a front end and I can view all my syslog messages generated by that server on web interface

I am using AIX as a client and I am getting some config errors.
691>syslog-ng -d
Error binding socket; addr='AF_INET(0.0.0.0:514)', error='Address already in use (67)'
Error initializing source driver; source='local'


Here is my config file, What it does is it needs to send logs to syslog-ng centralised server

690>cat syslog-ng.conf
options {
     dir_perm(0755);
     perm(0644);
     chain_hostnames(no);
     keep_hostname(yes);
};

source local {
        unix-dgram("/dev/log");
        udp(ip(0.0.0.0) port(514));
        internal();
};


filter f_1 {  facility(auth) and level(debug..emerg); };
filter f_2 { facility(kern) and level(debug..emerg); };
filter f_3 { facility(daemon) and level(warning..emerg); };
filter f_4 { facility(local1) and level(debug..emerg); };
filter f_5 { facility(local2) and level(debug..emerg);};


log { source(local); filter(f_1); destination(d_1); };
log { source(local); filter(f_2); destination(d_1); };
log { source(local); filter(f_3); destination(d_1); };
log { source(local); filter(f_4); destination(d_1); };
log { source(local); filter(f_5); destination(d_1); };


destination d_1 { udp("redhat9.qlogic.com" port(1099)); };



So I am not sure why this is not working.....Can some one help me fix this...

Offline  
Pages: [1]
Jump to:  


Information Security News | Jerry Bell's blog | Enterprise IT | Tropical Fish Information | Tropical Fish Forums