If you've already done the @remote.ip.address what does tcpdump say?
Maybe run syslog on the 'catcher' with the remote flag turned on.
On Sun, Dec 4, 2011 at 8:40 PM, Scott A. Johnson
<scott.a.johnson@gmail.com> wrote:
> Anyone have any experience setting up remote syslogg'ing? =A0I've spent
> the better part of today following several "how to" guides with
> syslog-ng and am looking for pointers, best practices, or a how-to
> that is confirmed current/working. =A0:)
>
> Many thanks.
>
> --
> Scott A. Johnson
> scott.a.johnson@gmail.com
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Mon Dec 5 20:14:02 2011
This archive was generated by hypermail 2.1.8 : Mon Dec 05 2011 - 20:14:02 AKST