syslog facility number

[Les Warden]

Our routers and DNS machines (HPUX 10.20 & 11.00) are sending to a linux syslog server. The syslog facility number is set on the routers so the syslog server can file the messages away in a particular file....
core routers have "logging facility local5"
distribution have "logging facility local4".
the syslog server has..
# log incoming dist routers to this file
local5.* /var/syslog/syslog.dist
#log incoming pix messages to this file
local4.* /var/syslog/syslog.pix
#log incoming unix messages to this file
local3.* /var/syslog/syslog.unix

I would like to have the DNS machines to do the same as the core and distribution with a facility of local3. I've been through the man pages but nothing has clicked so far. Any help is greatly appreciated.

[Chris Calabrese]

There's no easy way to force all the syslog traffic from a Unix machine to a particular facility. And, in fact, if you're trying to do this you're probably not fully grasping the idea of facilities. Use simple 'grep's on the syslog files to figure out what log entries came from what machines.

[Les Warden]

Thanks, Chris. I appreciate the "no easy way". As far as grasping; I get it. I already do greps on the core and dist files. When dealing with thousands of machines, it's nice to have them directed to individual files (what I'm attempting).