From owner-freebsd-questions@FreeBSD.ORG  Thu Sep 22 09:32:10 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3193516A41F
	for <questions@freebsd.org>; Thu, 22 Sep 2005 09:32:10 +0000 (GMT)
	(envelope-from sysjo@hades.yoafrica.com)
Received: from cortizone.yoafrica.com (cortizone.yoafrica.com [196.44.176.6])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B91E043D4C
	for <questions@freebsd.org>; Thu, 22 Sep 2005 09:32:05 +0000 (GMT)
	(envelope-from sysjo@hades.yoafrica.com)
Received: from hades.yoafrica.com
	([196.44.177.50] helo=localhost.localdomain ident=Debian-exim)
	by cortizone.yoafrica.com with esmtps (TLSv1:AES256-SHA:256)
	(Exim 4.51 (FreeBSD)) id 1EINQk-000He5-D1
	for questions@freebsd.org; Thu, 22 Sep 2005 09:31:50 +0000
Received: from sysjo by localhost.localdomain with local (Exim 4.52)
	id 1EINQZ-0007Zj-7Y
	for questions@freebsd.org; Thu, 22 Sep 2005 11:31:39 +0200
Date: Thu, 22 Sep 2005 11:31:39 +0200
From: John Oxley <john@yoafrica.com>
To: questions@freebsd.org
Message-ID: <20050922093139.GB25143@yoafrica.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.9i
Cc: 
Subject: Syslog to remote host
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Sep 2005 09:32:10 -0000

OK, I have syslog'ging to a remote host done.  I am logging from
morphine to marijuana.  On morphine I am saying, in /etc/syslog.conf
mail.info                                       @marijuana.yoafrica.com

On marijuana, in /etc/rc.conf, I have put
syslogd_flags="-a morphine:* -b marijuana"
which according to me accepts from morphine and binds on marijuana.

All is working to here, everything that morphine syslogs to mail.info I
can on marijuana get that out with mail.info.  The problem is it mixes
it up with marijuana's mail.info, and when I add a whole bunch of other
servers/switches/routers etc, its going to get VERY hairy.

How can I tell marijuana to log everything from morpine in
/var/log/morpine.  I have tried
+morphine
mail.info         /var/log/morphine/maillog

But that does absolutely nothing.  I am having trouble understanding the
syslog.conf man page.

TIA

-John


-- 
John Oxley
Systems Administrator
Yo!Africa
E-Mail:  john at yoafrica.com
Tel:     +263 4 858404
echo '9k[l:l;s<s=0l>x]s"[1+l<dd*l=d*-l;+ds<rl=2**l:+ds=d*rd*+4<-d15>>] s>[q]s-[d77/3*2-s;47l"x-P1+d78>`]s`0[d23/.5-3*s:0l`xr10P1+d24>$]ds$x'|dc