From owner-freebsd-questions@FreeBSD.ORG Thu Feb 26 14:44:16 2009 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C3D2F1065675 for ; Thu, 26 Feb 2009 14:44:16 +0000 (UTC) (envelope-from paul.halliday@gmail.com) Received: from qw-out-2122.google.com (qw-out-2122.google.com [74.125.92.27]) by mx1.freebsd.org (Postfix) with ESMTP id 80D8E8FC1F for ; Thu, 26 Feb 2009 14:44:16 +0000 (UTC) (envelope-from paul.halliday@gmail.com) Received: by qw-out-2122.google.com with SMTP id 3so557492qwe.7 for ; Thu, 26 Feb 2009 06:44:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type:content-transfer-encoding; bh=F3e5sfZyE0luJpLELiTxuvGnJ/wMIRY+wTWlob4wHVs=; b=Rvqjgy+qmMEub9/ODTQlgFWR+KhfLgbh8AM+dMhSoFiHQfWueUKKteiwvqlBDeQzJJ 3DOoG5c7MuIzPklAIbpLopLzlU/INrD3oc9RJbvmu8qGq5RStMyhmowEJ59H8uddehD2 6odtD/BkiqmyldAjFmVn8rVok5UIcPMMwW0Mo= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; b=n5i+dFpNrH6khp0pQLsyhXSOQqw5XfrPixgtaIQgIIuAUtdy3iqYj+/ZVTUcUEZ9Np VTnBL1tk5WRj8r+WEGyRiz4rQp0OjDfyzfP/xoobLrofiQkKK61l0uNTOFLxribqKvWk 0hDxwE29sLKkedvLgyMw4az7yGVxEftHI9Vjk= MIME-Version: 1.0 Received: by 10.229.110.13 with SMTP id l13mr945822qcp.4.1235657974113; Thu, 26 Feb 2009 06:19:34 -0800 (PST) Date: Thu, 26 Feb 2009 10:19:34 -0400 Message-ID: <2dab70a30902260619j67d56555g3de8dfd4a60a1abe@mail.gmail.com> From: Paul Halliday To: questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Subject: Can stock syslog do hostA -> fileA? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Feb 2009 14:44:17 -0000 I am collecting syslogs from a PIX and a couple of Barracudas. It would be a lot easier for each to have their own logfile. I have been poking around a bit; I saw this one: +host1 /var/log/host1 but it doesn't appear to work. Is it being trumped by something else in the config file? Is the syntax wrong? Thanks.