All,
After quite a bit of trail and error I managed to get log collection working. Here are the commands for /etc/syslog-ng/syslog-ng.conf:
source s_net { tcp(ip(10.0.0.1) port(514) max-connections (5000)); udp(ip(10.0.0.1) port(514)); };
destination cisco-remote { file("/var/log/cisco.log"); };
filter myfilter { ( level(notice) ); };
log {source(s_net); filter(myfilter); destination(cisco-remote);};
Tim
--