Hostname selectors in syslog.conf ?

[Richard P. Koett]

I need to act as a central syslog server for a number of boxes, so I
set syslogd_flags="-u" in /etc/rc.conf.

This works, and is currently dumping everything into /var/log/messages.
I would really like to specify a different log file for each host, however.

The man page for syslog.conf(5) describes selection based on program
name (using !program), but does not describe selection based on host
name (using +hostname) as exists in other implementations.

Is there a way I can configure this behaviour in OpenBSD >= 3.1, or
can anyone recommend an alternative to syslogd ?

Thanks,
RPK.

[Clint M. Sand]

Post by Richard P. Koett
I need to act as a central syslog server for a number of boxes, so I
set syslogd_flags="-u" in /etc/rc.conf.
This works, and is currently dumping everything into /var/log/messages.
I would really like to specify a different log file for each host, however.
The man page for syslog.conf(5) describes selection based on program
name (using !program), but does not describe selection based on host
name (using +hostname) as exists in other implementations.
Is there a way I can configure this behaviour in OpenBSD >= 3.1, or
can anyone recommend an alternative to syslogd ?
Thanks,
RPK.

Although not on OpenBSD, I've used both msyslog and syslog-ng
(http://www.balabit.hu/en/downloads/syslog-ng/).

There are options with these that enable the daemon to do a regex style
filter to parse the logs as they arrive so you can point them to different
files based on a keyword (such as hostname).

Cheers,
Clint/Schwack