I am trying to setup my PIX box to log to my syslog server.

I have added the following line to my syslog.conf file:

local3.* /var/log/logx

I have configured my pix as follows (I have replaced my if name and ip for security reasons):

logging on
logging timestamp
logging trap errors
logging facility 3
logging host <if> <ip>

This is a textbook configuration of the pix.

For some reason, my logs keep getting put into the /var/log/messages file. The line that refers to this file in my syslog.conf file is as follows:

*.info;mail.none;authpriv.none;cron.none /var/log/messages

I hope somebody has some ideas before i loose my marbles

TIA

neoflea,

Set the facility to 19. That is the one that corresponds to local3. Facility 3 is "3 system daemons" or daemon in syslog.conf.

See section 4.1.1 in RFC 3164 for the rest of the numbers, and all the juicy details.

Good Luck,
chris