############################################################### # $Id: solaris-conf.txt,v 1.6 2003/03/13 02:28:36 nate Exp $ # # This is for syslog-ng 1.5.x The only things I think you'd have to cut # out to use this on 1.4.x are log_msg_size() and bad_hostname(). ############################################################### options { long_hostnames(off); # doesn't actually help on Solaris, log(3) truncates at 1024 chars log_msg_size(8192); # buffer just a little for performance sync(1); # memory is cheap, buffer messages unable to write (like to loghost) log_fifo_size(2048); # I hate Vignette StoryServer bad_hostname("^(ctld.|cmd|tmd|last)$"); # The time to wait before a dead connection is reestablished (seconds) time_reopen(10); }; ############################################################### source src { sun-stream("/dev/log" door("/etc/.syslog_door")); internal(); }; ############################################################### destination syslog { file("/var/log/syslog"); }; destination messages { file("/var/adm/messages"); }; destination loghost { tcp("192.168.1.254" port(5140)); }; ############################################################### filter f_mail { facility(mail); }; filter f_not_mail { not facility(mail); }; filter f_not_brightmail { not program("bmifilter.*"); }; filter f_brightmail { program("bmifilter.*"); }; ############################################################### log { source(src); filter(f_mail); filter(f_not_brightmail); destination(syslog); }; log { source(src); filter(f_not_mail); filter(f_not_brightmail); destination(messages); }; log { source(src); filter(f_not_mail); filter(f_not_brightmail); destination(loghost); }; ###############################################################