Return
-
Title
Duplicate Destinations, Different Template -
Description
Two or more identical destinations (matching IP Address/Hostname, port, and transport) have been created with different message templates so a single source can receive multiple copies of a log in different formats, however, Syslog-ng or Syslog-ng Store Box (SSB) fails to start citing matching destinations. -
Cause
Syslog-ng and Syslog-ng Store Box (SSB) cannot use duplicate destinations as the persist file created when Syslog-ng is run is created using:
1.) Hostname/IP Address
2.) Port
3.) Transport (UDP, TCP, or TLS) -
Resolution
The following are 3 acceptable workarounds to this issue:
1.) Use a different port
2.) Use a different transport
3.) Have 1 destination use the IP Address and 1 destination use a DNS name (use multiple routable DNS hostnames for multiple destinations if desired)