I did my best to search and read all postings on this topic I could find on this forum but I'm still unable to resolve this problem.

I'm using Zenoss Core v2.5.1 and my setup is as follows :

I have syslog-ng listening on port UDP/514 for all syslog messages coming in from the network. All syslog messages having the local4 facility are selected and rerouted to ZenSyslog which is listening on port UDP/5514. If I generate a syslog message from one of my Cisco devices, nothing comes up in the Event Console of the Zenoss server.

Steps I took to troubleshoot the problem :

- I configured syslog-ng to reroute messages with local4 facility to a file in /var/log and I could see every message is being logged properly which means they are received and processed by syslog-ng.

- I increased the logging level to Debug for ZenSyslog daemon and sometimes in the past, I was able to see messages being received by it like this :

2010-06-18 14:36:59,194 DEBUG zen.Syslog: host=localhost.localdomain, ip=127.0.0.1

2010-06-18 14:36:59,194 DEBUG zen.Syslog: <165>Jun 18 14:36:59 nnn.nnn.110.61 394: Jun 18 14:36:58: %SYS-5-CONFIG_I: Configured from console by myname on vty0 (nnn.nnn.210.3)

2010-06-18 14:36:59,194 DEBUG zen.Syslog: fac=160 pri=5

2010-06-18 14:36:59,194 DEBUG zen.Syslog: facility=local4 severity=2

as you can see, no mention of queuing the message

Now I don't even get that anymore :

2010-06-21 13:20:48,258 DEBUG zen.thresholds: Checking value 0 on Daemons/localhost/zensyslog_eventQueueLength
2010-06-21 13:20:48,258 DEBUG zen.MinMaxCheck: Checking zensyslog_eventQueueLength 0 against min None and max 1000
2010-06-21 13:21:43,215 DEBUG zen.ZenSyslog: Queueing event {'monitor': 'localhost', 'component': 'zensyslog', 'agent': 'zensyslog', 'manager': 'fbtlc003.fbn-nbf.local', 'timeout': 180, 'device': 'localhost', 'eventClass': '/Heartbeat'}
2010-06-21 13:21:43,216 DEBUG zen.ZenSyslog: Total of 1 queued events
2010-06-21 13:22:43,216 DEBUG zen.ZenSyslog: Queueing event {'monitor': 'localhost', 'component': 'zensyslog', 'agent': 'zensyslog', 'manager': 'fbtlc003.fbn-nbf.local', 'timeout': 180, 'device': 'localhost', 'eventClass': '/Heartbeat'}
2010-06-21 13:22:43,217 DEBUG zen.ZenSyslog: Total of 1 queued events
2010-06-21 13:23:43,217 DEBUG zen.ZenSyslog: Queueing event {'monitor': 'localhost', 'component': 'zensyslog', 'agent': 'zensyslog', 'manager': 'fbtlc003.fbn-nbf.local', 'timeout': 180, 'device': 'localhost', 'eventClass': '/Heartbeat'}

I'm getting heartbeat events being queued but there are no corresponding events in the Event Console.

Any idea of what steps should I take next ?

Thanks