source s_udp {
udp( ip("0.0.0.0") port(514) );
};
destination d_file_rem {
file( "/var/log/HOSTS/$HOST.log.txt"
template("$YEAR-$MONTH-$DAY-$HOUR:$MIN:$SEC HOST:$FULLHOST FAC:$FACILITY PRIO:$PRIORITY MSG: $MESSAGE\n")
create_dirs(yes)
);
};
filter f_ciscochat {
not match("transmitting a proposal on")
and not match("SEC-6-IPACCESSLOG")
and not match("SNMP-3-AUTHFAIL")
;
};
log {
source(s_udp);
filter(f_ciscochat);
destination(d_file_rem);
};
filter f_bpduguard {
match("SPANTREE.*?BLOCK.*?BPDUGUARD")
or match("ERR_RECOVER");
};
destination d_sms {
program("/etc/syslog-ng/sms.pl"
template("$YEAR-$MONTH-$DAY-$HOUR:$MIN:$SEC HOST:$FULLHOST FAC:$FACILITY PRIO:$PRIORITY MSG: $MESSAGE\n")
);
};
log {
source(s_udp);
filter(f_bpduguard);
destination(d_sms);
};
destination d_udp { udp("2.1.0.1" port(514) ); };
#destination d_tcp { tcp("2.1.0.1" port(514) ); };
log {
source(s_udp);
filter(f_bpduguard);
destination(d_udp);
};