title: How to send audit.log to remote server with syslog-ng
body: <p>Good day,</p>
  
  <p>I have SLES 10 with syslog-ng (syslog-ng-1.6.8-20.23.1)
  and I cannot get the proper configuration so the file /var/log/audit/audit.log is sent to the remote syslog server.</p>
  
  <p>I used tcpdump and I can see some details in the packets that are sent to the remote server, but  I am not seeing anything with the audit format in the tcp packet.</p>
  
  <pre><code>filter f_audit   { facility(13); };
  filter f_audit2 {facility(security);};
  
  destination d_local_facility {
    file("/var/log/$FACILITY/$FACILITY.log");
  
  
  destination d_remote_loghost { tcp("$hostname" port(514)); };
  
  log {
    source(s_local);
      destination(d_remote_loghost5);
  
  };
  </code></pre>
  
  <p>What am I doing wrong?</p>