syslog-ng.conf.5 (2012 03)
syslog-ng.conf(5) syslog-ng.conf(5)
NAME
/etc/syslog-ng.conf - syslog-ng configuration file
DESCRIPTION
The configuration file for syslog-ng. A message route in syslog-ng is made up from three parts: a
source, a destination and filtering rules.
SOURCES
You can declare source statements using the source keyword:
source <sourcename> { sourcedriver params; sourcedriver params; ... };
sourcename is an identifier you’ll use to refer to this group of messages. sourcedriver is a method of get-
ting a given message. The following drivers are available:
* file <filename> - reads messages from the given file
* unix-dgram <filename> - reads messages from the given AF_UNIX, SOCK_DGRAM socket
(BSDi style)
* unix-stream <filename> - reads messages from the given AF_UNIX, SOCK_STREAM socket
(Linux style)
* udp <ip>,<port> - network source using the UDP protocol. If you do not want to bind to a
specific interface use 0.0.0.0.
* tcp <ip>,<port> - network source using the TCP protocol.
* sun-streams <filename> - local source used on Solaris systems
DESTINATIONS
Destinations can be created using the destination keyword:
destination <destname> { destdriver params; destdriver params; ... ;};
* file <filename> - writes messages to the given file
* unix-dgram <filename> - writes messages to the given AF_UNIX, SOCK_DGRAM socket (BSDi
style)
* unix-stream <filename> - writes messages to the given AF_UNIX, SOCK_STREAM socket
(Linux style)
* udp <ip>,<port> - network destination using the UDP protocol
* tcp <ip>,<port> - network destination using the TCP protocol
* usertty <username> - sends log to the given user’s terminal
FILTERS
You can create filters using the filter keyword:
filter <filtername> { expression;};
Where expression is a simple boolean expression. You can use "and", "or" and "not" to connect builtin func-
tions. Functions can be one of:
* facility(list of comma separated facility names)
* level(list of comma seperated priority nammes OR a range separated by "..")
* program(regexp to match program name)
* host(regexp to match program name)
* match(regexp to match program name)
LOG STATEMENTS
You can connect sources and destinations using the log statement:
log { source S1; source S2; ... filter F1; filter F2; ... destination D1; destination D2; ... };
Where Sx refers to one of the declared log sources, Fx one of the filters and Dx one of the destinations.
Filters are ANDed together.
HP-UX 11i Version 3: March 2012 − 1 − Hewlett-Packard Company 1