与一个服务器分配两个接口,.234和.235,我怎样才能创build一个filter分离传入的消息?
这个configuration只输出到一个文件夹
—-列表界面—-
eth0:234 – 10.10.10.234
eth0:235 – 10.10.10.235
—- syslog-ng.conf —-
source s_net_234 { syslog(ip(10.10.10.234) port(514) max-connections(300) transport("udp")); }; source s_net_235 { syslog(ip(10.10.10.235) port(514) max-connections(300) transport("udp")); }; destination d_switches_hosts.235 { file("/var/log/HOSTS/switches.235/$HOST_FROM/$YEAR$MONTH$DAY.log" }; destination d_switches_hosts.234 { file("/var/log/HOSTS/switches.234/$HOST_FROM/$YEAR$MONTH$DAY.log" }; filter f_switches234 { (source(s_net_234)) }; filter f_switches235 { (source(s_net_235)) }; log { source(s_net_234); destination(d_switches_hosts.234); flags(final); }; log { source(s_net_235); destination(d_switches_hosts.235); flags(final); };