Anton Aylward wrote:
# # Enable this and adopt IP to send log messages to a log server. # destination logserver { udp("192.168.2.18" port(514)); }; log { source(src); destination(logserver); };
That's the IP address of my log server on the lcoal network and I have a screen devoted to tailing though that with pretty colourization ...
However my local /var/log/messages reports
Jan 5 08:23:13 BigBoy syslog-ng[2693]: I/O error occurred while writing; fd='10', error='Connection refused (111)' Jan 5 08:23:13 BigBoy syslog-ng[2693]: Connection broken; time_reopen='60'
Eh? This is UDP isn't it? How can the connection be refused?
Are you sure that your logserver allows remote systems to send syslog messages? That's not on by default. On 192.168.2.18, issue the command "netstat -anu | grep 514". It should output the line udp 0 0 0.0.0.0:514 0.0.0.0:* (The IP address may be 192.168.2.18 instead of 0.0.0.0.) If not, the configuration issue is with your syslog server, not with your BigBoy client. If yes, I'd use nmap to see if BigBoy can reach the 514 udp port on logserver. HTH, Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod@acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org