Table 5.3: Source Drivers Parameters (Syslog-Ng Configuration) - Avocent Cyclades ACS Command Reference Manual

80 ACS Advanced Console Server Command Reference Guide
2. Define Sources
source <identifier> { source-driver([params]); source
driver([params]); ...};
where,
• identifier - Uniquely identifies a given source.
• source-driver - A method of retrieving a given message.
• params - Each source-driver takes a required or an optional parameter.

Table 5.3: Source Drivers Parameters (Syslog-ng Configuration)

Option
internal()
unix-stream
(filename [options])
and
unix-dgram
(filename [options])
tcp([options])
and
udp([options])
file(filename)
pipe(filename)
The following are examples of how to define sources.
• Read from a file.
source <identifier> {file(filename);};
• Read messages from /temp/file1 file.
source file1 {file('/temp/file1');};
• Receive messages from the kernel.
Description
Messages are generated internally in syslog-ng.
They open the given AF_UNIX socket and start listening for messages.
Options: owner(name), group(name), perm(mask) are equal
global options.
keep-alive(yes/no) - Selects whether to keep connections opened when
syslog-ng is restarted. May be used only with unix_stream. Default: yes
max-connections(n) - Limits the number of simultaneously opened
connections. May be used only with unix_stream. Default: 10.
These drivers let you receive messages from the network, and as the
name of the drivers show, you may use both TCP and UDP.
None of tcp() and udp() drivers require positional parameters. By default
they bind to 0.0.0.0:514, which means that syslog-ng listens on all
available interfaces.
Options:
ip(<ip address>) - The binding IP address. Default: 0.0.0.0.
port(<number>) - UDP/TCP port used to listen messages. Default: 514.
max-connections(n) - Limits the number of simultaneously opened
connections. Default: 10.
Opens the specified file and reads messages.
Opens a named pipe with the specified name and listens for messages.
(You need to create the pipe using the mkfifo command).