Hey all, I need some help.<br><br>I have a Pix FW using Local4.warning on UDP 514 and I want to send it to a log file on my CentOS Linux server using Splunk. Syslog starts with the options -m 0 -r. I've config'd the syslog to send Local4.* to /var/log/pix.log. The Pix sends the syslog to the server and it shows in Splunk as a UDP source, but I can't log the info to the file. I've tried debug using syslogd -d with no errors or traffic on, or to, that file.
<br><br>Here's the file information and rights.<br>-rw-r--r-- 1 root root 0 Mar 29 15:52 pix.log<br><br>and the line from syslog.conf<br><br># Log messages from the Pix Firewall<br>local4.* /var/log/pix.log
<br><br>Any help or insight would be much appreciated.<br>