I followed the article outlined above. But I am not able to override the default destination of log message. It is always written to disk. Here is my include file
syslog include "
weblog filter Log WebLog to remote server
filter f_weblog {
facility(local4) and level(debug..emerg) and match(\"WEBLOG\");
};
destination d_weblog {
udp(\"192.168.0.68\" port (19999));
};
log {
source(local);
filter(f_weblog);
destination(d_weblog);
};
filter f_no_weblog {
not match(\"WEBLOG\");
};
local4.*
filter f_local4 {
facility(local4);
};
log {
source(s_syslog_pipe);
filter(f_local4);
filter(f_no_weblog);
destination(d_ltm);
};
"
Any help would be greatly appreciated.
Nimbostratus