<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Jose,<br>
<br>
Jose Sanchez írta:
<blockquote cite="mid:65029.2024.qm@web35602.mail.mud.yahoo.com"
type="cite">
<pre wrap="">Hello,
I've been using classic syslog for centralizing apache access logs from one server to a remote syslog server, the thing is syslog adds some nasty tags before the lines in the access logs and I cant get them off, ie:
"Nov 25 21:25:37 server1 logger:"
I would like to know if syslog-ng has the option to filter this kind of stuff, I just want to have the logs sent to the syslog server exactly like I was saving them in a local access.log file.
</pre>
</blockquote>
I don't understand you <span id="result_box" class="short_text"><span
style="background-color: rgb(255, 255, 255);"
title="nem értelek teljesen">completely</span></span> where you use
syslog or syslog-ng on these hosts<br>
<br>
If you use syslog-ng then yes the syslog-ng can do it. There is an
example of the possible solutions if both sides are syslog-ng:<br>
<br>
<u>client side:</u><br>
<br>
source s_file{file("/var/log/apache2/access.log"<br>
flags(no-parse)<br>
);};<br>
<br>
destination d_tcp{tcp("10.30.0.32" port(666)<br>
template("$MSG\n")<br>
);};<br>
<br>
log {<br>
source(s_file);<br>
destination(d_tcp);<br>
};<br>
<br>
<br>
<u>server side:</u><br>
source s_tcp{tcp(port(666)<br>
flags(no-parse)<br>
);};<br>
<br>
destination d_test { file("/var/log/test.log"<br>
template("$MSG\n")<br>
); };<br>
<br>
log {<br>
source (s_tcp);<br>
destination(d_test);<br>
};<br>
<br>
<br>
if you use syslogd on client side and syslog-ng on the server side you
need to use a config like this (but I am not sure in this case):<br>
<br>
source s_tcp{udp(port(514));};<br>
<br>
destination d_test { file("/var/log/test.log"<br>
template("$MSG\n")<br>
); };<br>
<br>
log {<br>
source (s_tcp);<br>
destination(d_test);<br>
};<br>
<br>
<br>
<blockquote cite="mid:65029.2024.qm@web35602.mail.mud.yahoo.com"
type="cite">
<pre wrap="">
Thanks in advance.
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
<br>
</body>
</html>