Hi all: I am configuring a server to act as a central logging server. I have everything working just fine and the server is receiving log traffic from my other servers and writing the files to /var/log/HOSTS/..... I followed this Cool Solutions:


So here is my issue. Rather than write the server logs to /var/log... I want to write them to a separate volume. The volume is formatted with ext3 and mounted on /mnt/shared. So I went into /etc/syslog-ng/syslog-ng.cong.in and edited to as follows:

# this is for separating out network hosts into individual log files.
destination std {
file ("/mnt/shared/logs/HOSTS/$YEAR-$MONTH/$HOST/$FACILITY-$YEAR-$MONTH-$DAY"
owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes)
log {

Note that the path to the new logging location is /mnt/shared/logs/.... But the logs will not write there. I also tried /root/logs... and even /var/logs (plural) but no luck. It looks like syslog-ng will only write files to /var/log/... no matter where the config file actually points. I have checked rights on the directories and they all are root:root / 775.

So, what am I missing?