Loghost server

[Robert True]

I would like to configure a syslog loghost server that would store received messages by hostname rather than class and severity, IE:

mesgs from host1 are stored in
loghost_server:/var/log/host1

msgs from host2
loghost_server:/var/log/host2

etc...

Any thoughts as to how it might be done, if possible? I know it can be done by class and severity. If not, is there any freeware prog to split the messages post logging, other than roll my own.

[MarkSyder]

Just off the top of my head (I've never tried this) you could make /var/adm/syslog/syslog.log a symbolic link to loghost_server:/var/log/host1 etc.

Mark Syder (like the drink but spelt different)

[Robert True]

No, linking to a new log name is not what I am after. All messages from all remote hosts are currently going to the syslog.log on the loghost server. I want to send all of each remote hosts messages to a different log on the loghost server.

Rt.

[Tom Maloy]

You can only choose based on the options in syslog.conf, so you will have to roll, roll, roll your own, gently down the...