You might think about using syslog-ng instead.
However you may get the desired effect by moding on the host prior to
sending to the loghost using something like:
*.* ifdef('LOGHOST', /var/log/hostname, @remote)
:)
Missy
On 10/10/08 1:53 PM, "Michael Loomis" <[log in to unmask]> wrote:
> I'm very excited to use MSUNAG for a tech post, for the first time.
>
> I am building a central loghost. It is successfully receiving logs from
> remote hosts. Now, I want to siphon those logs off to a separate file like
> "/var/log/hostname.log", instead of dumping all remote logs into the local
> messages file. I know that in FreeBSD, you can specify an block of actions
> for a remote log in the syslog.conf file, by using the "+" sign. However,
> that does not work in OpenBSD. Does anyone have experience with this? OR
> have a sample syslog.conf line they could share? OR some other workaround?
> Thanks,
> Michael Loomis
> Network Security, ATS
|