options {
	sync (0);
	time_reopen (10);
	log_fifo_size (1000);
	long_hostnames (off);
	use_dns (yes);
	use_fqdn (no);
	create_dirs (yes);
	keep_hostname (yes);

       owner(root);       # owner of created files
       group(root);       # group of created files
       perm(0600);        # permissions of created files
       dir_perm(0700);    # permissions of created dirs
};


source s_sys {
	file ("/proc/kmsg" log_prefix("kernel: "));
	unix-stream ("/dev/log");
	internal();
	# udp(ip(0.0.0.0) port(514));

};


source httpd { 
file("/var/log/httpd/syslog-ng/access.log");

};
destination logserver { udp("172.28.31.3" port(514)); };

destination splunk { udp("172.28.31.3" port(514)); };
log {
 source(httpd);
 destination(logserver); 
};

destination d_sshd { file("/var/log/sshd/sshd.log"); };
filter f_sshd       { facility(AUTHPRIV); };
log { 
source(s_sys);
filter(f_sshd);
destination(logserver);
};


# vim:ft=syslog-ng:ai:si:ts=4:sw=4:et: