syslog-ng.conf

syslog-ng.conf

options {
	sync (0);
	time_reopen (10);
	log_fifo_size (1000);
	long_hostnames (off);
	use_dns (no);
	use_fqdn (no);
	create_dirs (yes);
	keep_hostname (yes);
	log_msg_size(8192);
};

source s_sys {
	file ("/proc/kmsg" log_prefix("kernel: "));
	unix-stream ("/dev/log");
	internal();
	# udp(ip(0.0.0.0) port(514));
};

...

destination d_ruby {
  file("/var/log/ruby/$PROGRAM/$YEAR-$MONTH/$DAY/$PROGRAM-$YEAR$MONTH$DAY"
       owner("root")
       group("root")
       perm(0640)
       dir_perm(0770)
       create_dirs(yes)
   );
};

filter f_ruby {
  program("ruby-***");
};

log {
  source(s_sys);
  filter(f_ruby);
  destination(d_ruby);
  flags(final);
};