syslog-ng Premium Edition 7.0.30 - Administration Guide

Example: A simple source statement

The following source statement receives messages on the TCP port 1999 of the interface having the 10.1.2.3 IP address.

source s_demo_tcp {
    network(
        ip(10.1.2.3)
        port(1999)
    );
};

Example: A source statement using two source drivers

The following source statement receives messages on the 1999 TCP port and the 1999 UDP port of the interface having the 10.1.2.3 IP address.

source s_demo_two_drivers {
    network(
        ip(10.1.2.3)
        port(1999)
    );
    network(
        ip(10.1.2.3)
        port(1999)
        transport("udp")
    );
};

Example: Setting default priority and facility

If the message received by the source does not have a proper syslog header, you can use the default-facility() and default-priority() options to set the facility and priority of the messages. Note that these values are applied only to messages that do not set these parameters in their header.

source headerless_messages {
    network(
        default-facility(syslog)
        default-priority(emerg)
    );
};

Example: Source statement on a Linux based operating system

The following source statement collects the following log messages:

• internal(): Messages generated by syslog-ng.

• network(transport("udp")): Messages arriving to the 514/UDP port of any interface of the host.

• unix-dgram("/dev/log");: Messages arriving to the /dev/log socket.

source s_demo {
    internal();
    network(transport("udp"));
    unix-dgram("/dev/log");
};