Cyclades AlterPath ACS Command Reference Manual page 201

Example 3 - Write all messages with levels info, notice or warning and
received from syslog clients (local and remote) to /var/log/ messages file :
the lines below at the END of the file syslog-ng.conf file, keeping all lines
above commented.
source sysl {unix-stream("/dev/log");};
source s_udp { udp(ip(<ip client>) port(<udp port>)); };
filter f_messages { level(info..warn);};
destination d_message { file("/var/log/messages"); };
log { source(sysl); source(s_udp); filter(f_messages); destination(d_messages);};
File Description 5.17: part of the /etc/syslog-ng/syslog-ng.conf file
Example 4 - Send e-mail if message received from local syslog client has the
string "kernel panic".
keeping all lines above commented.
source sysl {unix-stream("/dev/log");};
filter f_kpanic{facility(local1) and level(info) and match("ALARM") and match("kernel panic");};
destination d_mail1 {
pipe("/dev/cyc_alarm"
template("sendmail -t z@none.com -f a@none.com -s \"ALARM\" \\
};
log { source(sysl); filter(f_kpanic); destination(d_mail1); };
File Description 5.18: part of the /etc/syslog-ng/syslog-ng.conf file
Example 5 - Send e-mail and pager if message received from local syslog client
has the string "root login".
file, keeping all lines above commented.
source sysl {unix-stream("/dev/log");};
filter f_root {facility(local1) and level(info) and match("ALARM") and match("root login");};
destination d_mail1 {
pipe("/dev/cyc_alarm"
template("sendmail -t z@none.com -f a@none.com -s \"ALARM\" \\
};
destination d_pager {
pipe("/dev/cyc_alarm"
template("sendsms -d 123 -m \"$FULLDATE $HOST $MSG\" 10.0.0.1"));
};
log { source(sysl); filter(f_root); destination(d_mail1); destination(d_pager); };
File Description 5.19: part of the /etc/syslog-ng/syslog-ng.conf file
AlterPath ACS Command Reference Guide
Administration
Insert the lines below at the END of the file syslog-ng.conf file,
-m \"$FULLDATE $HOST $MSG\" -h 10.0.0.2"));
Insert the lines below at the END of the file syslog-ng.conf
-m \"$FULLDATE $HOST $MSG\" -h 10.0.0.2"));
Insert
185