All, After quite a bit of trail and error I managed to get log collection working. Here are the commands for /etc/syslog-ng/syslog-ng.conf:
source s_net { tcp(ip(10.0.0.1) port(514) max-connections (5000)); udp(ip(10.0.0.1) port(514)); }; destination cisco-remote { file("/var/log/cisco.log"); }; filter myfilter { ( level(notice) ); }; log {source(s_net); filter(myfilter); destination(cisco-remote);}; Tim -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system ⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/ ⠈⠳⣄⠀⠀