syslog-ng

[Anders Norrbring]

Leon Kolchinsky skrev:
>> Hi, I need help setting up Cyrus and syslog-ng to have all the Cyrus
>> logs in their own files.
>>
>> It seems like I just cannot get it right, no matter how I try.
>> So, I'd be grateful for setup info on syslog-ng to accomplish this.
>>
>> Thanks!
>> Anders.
>>
>>
> 
> Hello Anders,
> 
> Look here -
> http://linux.derkeiler.com/Mailing-Lists/SuSE/2007-09/msg01265.html
> 
> Or in short:
> At syslog-ng.conf:
> filter f_cyrus { program("lmtpunix") or program("imap") or
> program("ctl_cyrusdb") or program("cyr_expire") or match("master"); };
> destination cyrus { file("/var/log/cyrus"); };
> log { source(src); filter(f_cyrus); destination(cyrus); };
> 
> 
> Best Regards,
> Leon Kolchinsky

Hi Leon!
I found an even "better" way.. I looked up the source config in the SUSE 
source rpm, and they have rerouted the syslog from the default local6 to 
daemon, so this is what should go into the syslog config;

filter f_cyrus      { facility(daemon); };
destination d_cyrus { file("/var/log/cyrus"); };
log { source(src); filter(f_cyrus); destination(d_cyrus); flags(final); };

This works just great now.. ;)
Anders.