Can stock syslog do hostA -> fileA?

[Joost Bekkers]

On Thu, February 26, 2009 15:19, Paul Halliday wrote:
> I am collecting syslogs from a PIX and a couple of Barracudas. It would
be a lot easier for each to have their own logfile. I have been poking
around a bit; I saw this one:
>
> +host1 /var/log/host1
>
> but it doesn't appear to work. Is it being trumped by something else in
the config file? Is the syntax wrong?

I think you're looking for something like this:

!*  # reset any previous program selector. Optional
+host1
*.* /var/log/host1
+*  # reset the host selector. Optional

Also keep in mind the default flags for syslogd include a -s which
prevents syslogd from logging messages from remote machines.

Joost.