Dears,,, <br><br>Tnx for your quickly reply. :)<br><br>I've 1 syslog-ng server and 8 clients in my network. <br><br>Syslog-Ng server collecting all log of that clients. But syslog-ng can collecting only bash & sh shell logs.<br>
Can't collect all command log off csh, tcsh ... etc. other shells...<br><br>BR--- <br>Munkh-Erdene<br><br><div class="gmail_quote">On Mon, Oct 1, 2012 at 10:47 PM, Gergely Nagy <span dir="ltr"><<a href="mailto:algernon@balabit.hu" target="_blank">algernon@balabit.hu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi!<br>
<br>
I would like to ask you to write to the syslog-ng mailing list<br>
(<a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>) with syslog-ng<br>
questions instead of contacting me directly.<br>
<br>
However, I will try to answer your mail here now, since I'm a little<br>
confused about what you're trying to accomplish.<br>
<div class="im"><br>
Munh-Erdene E <<a href="mailto:munhluu@gmail.com">munhluu@gmail.com</a>> writes:<br>
<br>
> Syslog_NG works fine with bash & sh shells &&& writing clientlogs on<br>
> server.<br>
><br>
> But not working other shells, example: csh, ksh, tscsh ...<br>
><br>
> In Client side:<br>
</div>> Add some config on *Vi /etc/bashrc *<br>
<div class="im">><br>
> # log to syslog<br>
><br>
> declare ME<br>
><br>
> ME=$(awk -v val=$UID -F ":" '$3==val{print $1}' /etc/passwd)<br>
><br>
> export PROMPT_COMMAND='{ msg=$(history 1 | { read x y; echo $y; }); logger<br>
> -p <a href="http://local5.info" target="_blank">local5.info</a> "CMDLOG PWD=$PWD ; USER=$ME ; COMMAND=$msg"; }'<br>
><br>
><br>
><br>
</div>> *2. Vi /etc/rsyslog.conf*<br>
<div class="im">><br>
><br>
><br>
> *.info;mail.none;authpriv.none;cron.none @<a href="http://192.168.0.1" target="_blank">192.168.0.1</a><br>
><br>
> authpriv.* @<a href="http://192.168.0.1" target="_blank">192.168.0.1</a><br>
><br>
> Can you help me? pls<br>
<br>
</div>I don't really see where syslog-ng comes into play here? Neither logger<br>
nor rsyslog have much to do with syslog-ng itself. Nor should any shell<br>
or whatsoever affect syslog-ng, as it's a daemon that should be started<br>
at boot time, the shell you use need not have any effect on its<br>
behaviour.<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
|8]<br>
<br>
</font></span></blockquote></div><br>