sagan for Debian ---------------- When Sagan starts, it will create a FIFO: /var/run/sagan/sagan.fifo You have to configure the syslog daemon to send events to this FIFO. For rsyslog, see https://wiki.softwink.com/bin/view/Main/SaganHOWTO#Rsyslog_configuration An example template for rsyslog is provided in the examples directory. To install it, copy the file :: cp /usr/share/doc/sagan/examples/rsyslog.d/sagan.conf /etc/rsyslog.d/ and restart rsyslog. For syslog-ng, see https://wiki.softwink.com/bin/view/Main/SaganHOWTO#Syslog_ng_configuration -- Pierre Chifflier , Sat May 14 07:04:34 UTC 2011