<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
Well in fact the application create a file to log into, not a stream, can syslog-ng get a file in a chroot for a source, seams to work only with stream that are in a chroot.<br><br>And yes, i strace the application and notice that the application just create a file, not stream log.<br><br>any chance of getting syslog-ng take this file for source ? (as for now, it doesn't take a chroot file).<br><br><br><br>> From: Sandor.Geller@morganstanley.com<br>> To: syslog-ng@lists.balabit.hu<br>> Date: Fri, 6 Jun 2008 09:07:42 +0100<br>> Subject: Re: [syslog-ng] Collecting logs from a chrooted appli<br>> <br>> Hi,<br>> <br>> > I setup syslog-ng.conf with this setings to let create the stream:<br>> ><br>> > source src_chroot_appli { unix-stream("/var/appli/dev/log"); };<br>> ><br>> > It works and create the socket.<br>> ><br>> > then i config the application log stream path to /dev/log (as<br>> > the application is chrooted, the root directory is already<br>> > /var/appli, so logging to /dev/log is ok )<br>> ><br>> > then the configuration to log it in the appli.log file in the<br>> > /var/log/ outside the chroot :<br>> ><br>> > destination appli_log { file("/var/log/appli.log"); };<br>> ><br>> > then<br>> ><br>> > log { source(src_chroot_appli); destination(appli_log); };<br>> ><br>> > But nothing is created in the /var/log directory (outside chroot).<br>> ><br>> > Btw: syslog-ng version is 1.6.9<br>> <br>> Could you trace the application? It would be really good to see<br>> how does it try to log. The best would be to start it under strace.<br>> <br>> Regards,<br>> <br>> Sandor<br>> --------------------------------------------------------<br>> <br>> NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.<br>> ______________________________________________________________________________<br>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<br>> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng<br>> FAQ: http://www.campin.net/syslog-ng/faq.html<br>> <br><br /><hr />Avec Windows Live Messenger restez en contact avec tous vos amis ! <a href='http://www.windowslive.fr/messenger/' target='_new'>Téléchargez Messenger, c'est gratuit !</a></body>
</html>