On a SRX1500 there is currently a log stream setup which is sending a copy to a log server and i would like to have the logs sent to a second server. How would i set that up, when I tried to add a second host statement it would over wirte the current one.
set security log mode streamset security log source-address 10.x.x.xset security log stream log-collector format sd-syslogset security log stream log-collector host 10.10.7.28
Have you tried creating another stream?
set security log stream log-collector2 format sd-syslogset security log stream log-collector2 host a.b.c.d
Thats what i was thinking, thanks.