# 'slapd' is used in the last line to specify the file that the captured messages are to be written to destination slapd { file("/var/log/slapd.log"); }; # 'f_slapd' tells syslog-ng which "facility" to capture (slapd uses local4) filter f_slapd { facility(local4); }; # the log statement puts it all together log { source(src); filter(f_slapd); destination(slapd); }; # after making these changes, send syslog-ng a HUP signal or use your init script to restart it