syslog-ng configuration to collect vsyslog() events

[kalkotivinay]

Hi,

I am trying to figure if syslog-ng can capture events logged by vsyslog() system call and redirect them to specified destinations.

Can anyone give me pointers to this.

Thanks,
Vinay

[mutex]

Yes.  You need to configure syslog-ng to read from the standard unix stream file that glib is configured to write to

[kalkotivinay]

Thanks Mutex. I am able to read from unix-stream.

I have a scenario where 3 processes are logging events using the vsyslog() call. In syslog-ng, I should redirect  events from different processes to different destinations. How should I filter the events that I get from /dev/log ?.

Is the following configuration a good configuration or are there any better ways of doing this ?

filter program_myprog { program(myprog); };
log { source(src); filter(program_myprog); destination(dest); };

Thanks,
Vinay

[mutex]

I am sorry for the delay in getting back.  Busy times.  I think you have the best way to separate the logs with your idea above.