mario365_345588
Jan 09, 2018Nimbostratus
Issue Using Multiple Filters with Syslog-ng
I can only get authpriv messages to send to my syslog server. When I try using multiple filters it breaks things & even the authpriv doesn't send. I tried adding one filter to my include statement to troubleshoot and when I add the user filter alone I can only get messages when the F5 is rebooted by root vias SSH. My goal is to have the F5 send only logins, logouts & config/command updates (both CLI & SH) to my syslog server. I read all the documents but cannot get both filters to work. The F5 accepts them but doesn't send the logs. Could this be a bug? Am I configuring things wrong? Here's my config...