<div dir="ltr">Hi Gabor,<div><br></div><div>Now i am getting logs on server.</div><div><br></div><div>Now i wan to send clients apache logs on server. Apache create custom logs on "/usr/local/apache/logs/access_67-2018-05-11.log ".</div><div> </div><div>currently logs are created on<b> "</b><span style="font-weight:bold;color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">f</span><span style="font-weight:bold;color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">ile("/var/log/</span><wbr style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><b>from_net");}; </b>this location and all are coming on from_net file .</span></div><div><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><br></span></div><div><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">But Now i want to send apache logs on server in same format like <span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">access_67-2018-05-11.log ,then how to configure it on both side?</span></span></div><div><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><br></span></span></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div><b><font color="#0000ff"><i>Thanks & Regards </i></font>:-<br></b></div><b>VINOD SINGH SAUD<br></b></div><div><b>(M):- 09718663552<br></b></div><div><b><font color="#00ff00">(W):-09997645597</font><br></b></div><div><b>(E) :- <a href="mailto:vinod.samant.123@gmail.com" target="_blank">vinod.samant.123@gmail.com</a><br></b></div></div></div></div></div></div>
<br><div class="gmail_quote">On Fri, May 11, 2018 at 1:42 PM, Nagy, Gábor <span dir="ltr"><<a href="mailto:gabor.nagy@balabit.com" target="_blank">gabor.nagy@balabit.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Vinod,<div><br></div><div>Do you see any error messages or warnings from syslog-ng on either the client or the server side?</div><div><br></div><div>Regards,</div><div>Gabor</div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Fri, May 11, 2018 at 8:26 AM, vinod samant <span dir="ltr"><<a href="mailto:vinod.samant.123@gmail.com" target="_blank">vinod.samant.123@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">Hi <div>My simple configuration is mentioned below but i can not get any logs from cilent to server.</div><div><br></div><div>Is this configuration are wright or not? if i have to some changes on this configuration file Please suggest.</div><div>Here i am doing simple configuration.</div><div><br></div><div>OS:- centos 6</div><div>Client IP:- 192.168.122.21</div><div>server IP:- 192.168.122.67 (central server)</div><div><br></div><div><br></div><div><br></div><div>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><wbr>>>>>>Client<<<<<<<<<<<<<<<<<<<<wbr><<<<<<<<<<<<<<<<<<<<<<<<<<</div><div><br></div><div><div>@version:3.13</div><div>@include "scl.conf"</div><div><br></div><div>source s_local {</div><div> system();</div><div> internal();</div><div><br></div><div>};</div><div>destination d_network {udp("192.168.122.67" port(514));</div><div><br></div><div>};</div><div><br></div><div>destination d_local {</div><div> file("/var/log/messages");</div><div>};</div><div><br></div><div>log{</div><div> source(s_local);</div><div> destination(d_network);</div><div> destination(d_local);</div><div><br></div><div>};</div></div><div><br></div><div>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><wbr>>>>>>>>>>>>Server config<<<<<<<<<<<<<<<<<<<<<<<<<wbr><<<<<<<<<<<<<<<<<<<<<<<<<<<<<</div><div><br></div><div><div>@version:3.13</div><div>@include "scl.conf"</div><div><br></div><div>source s_local{system(); internal();};</div><div>source s_network{</div><div><br></div><div> udp();</div><div> tcp();</div><div><br></div><div>};</div><div><br></div><div>destination d_local{file("/var/log/message<wbr>s");};</div><div>destination d_from_net{file("/var/log/from<wbr>_net");};</div><div>log{</div><div> source(s_local);</div><div> destination(d_local);</div><div>};</div><div>log { source(s_network); destination(d_from_net); };</div></div><div><br></div><div>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><wbr>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><wbr>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><wbr>>>>>>>>>>>>>>>>>>>>></div><div><br></div><div>Please suggest on this .</div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><span><br clear="all"><div><div class="m_-8768191527557338544m_-4023909134295138006gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div><b><font color="#0000ff"><i>Thanks & Regards </i></font>:-<br></b></div><b>VINOD SINGH SAUD<br></b></div><div><b>(M):- 09718663552<br></b></div><div><b><font color="#00ff00">(W):-09997645597</font><br></b></div><div><b>(E) :- <a href="mailto:vinod.samant.123@gmail.com" target="_blank">vinod.samant.123@gmail.com</a><br></b></div></div></div></div></div></div>
<br></span><span><div class="gmail_quote">On Thu, May 10, 2018 at 6:46 PM, Gergely Nagy <span dir="ltr"><<a href="mailto:algernon@balabit.com" target="_blank">algernon@balabit.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>>>>>> "vinod" == vinod samant <<a href="mailto:vinod.samant.123@gmail.com" target="_blank">vinod.samant.123@gmail.com</a>> writes:<br>
<br>
</span> vinod> 1. Is these change should on default configuration file syslog-ng.conf or<br>
vinod> we have to create new .conf file on conf.d/ directory ?<br>
<br>
These were meant to be complete configuration files, replacing<br>
syslog-ng.conf. But feel free to adapt them to any existing<br>
configuration.<br>
<span class="m_-8768191527557338544m_-4023909134295138006HOEnZb"><font color="#888888"><br>
-- <br>
|8]<br>
</font></span></blockquote></div><br></span></div>
<br></div></div>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailm<wbr>an/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support<wbr>/documentation/?product=<wbr>syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/sy<wbr>slog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>