syslog - filtering from a remote IP address

[richw]

I've had a little play and I can't seem to make syslog filter from a remote IP to a specific log - currently its being dumped into /var/log/messages.

Can someone shed some light?

[michaelnel]

[quote]
richw wrote:
Can someone shed some light?[/quote]

Could you ask a better question?

What exactly are you trying to do?

What have you tried so far, and what was the result (error messages, etc.)?

[richw]

Hi,

I want to take all the syslog messages coming 192.168.1.253 (its an internet router) and sent them to /var/log/dg834g but they are ending up in /var/log/messages, there are no error messages.

I've tired:

*.* @192.168.1.253 /var/log/dg834g

192.168.1.253 /var/log/dg834g

192.168.1.* /var/log/dg834g

[The_Vulpecula]

But where did you "tried" that ? In syslogd ?

[PhilDana]

Have a look at syslog-ng. It'll do what you want, along with a lot more.