March 2015 - syslog-ng - lists.balabit.hu

Gsoc'15
by Sagar Ghai 16 Mar '15

16 Mar '15

Hi, I would be interested in taking up one of the projects named: syslog-ng configuration editor using Qt. Can someone help me to proceed further.

1 0

Gsoc'15 Project Query
by Aman Jain 15 Mar '15

15 Mar '15

HI, I finally after gone through various projects ideas listen on your idea page i decided to go for Web Socket, can you please explain about that projecct idea.

1 0

Log Message flow visualization
by Kristóf Havasi 14 Mar '15

14 Mar '15

My name is Kristóf Havasi and I'm currently a first-year student at Budapest University of Technology and Economics. My primary motivation was to find one topic for the summer of 2015 which is within my circle of interests ,one that i consider suitable for myself to get familiar with in greater depths. After perceiving GSoC, I stumbled upon this project of yours named "Log Message Flow visualization" which i have found to be well fitting to the above-mentioned expectations, considering that i am highly interested in network technologies. I have got familiar with C language in the last two years, i am recently pursuing the intent to know more and more about The syslog-ng, and am very excited about the idea of contributing to it. Best regards, Kristóf Havasi

1 0

GSoC - 2015 reg..,
by Manikandan Selvaganesh 14 Mar '15

14 Mar '15

Hey Laszlo Budai, I am* Manikandan Selvaganesh* doing my final year* B.E ( Computer Science and Engineering )* in Sri Krishna College of Engineering & Technology, India. Currently, I am doing my interns in Red hat. I have a great interest in C, C++, HTML, CSS and PHP. I have done a number of projects in C, Performance analysis of data structures using C, Family Tree Maintenance using C, Memory Games using C and now i am working on "*Implementing logging framework in a gluster file system*" ( Code contributions are in Github ). I am highly interested in working on the GSoC project "*syslog-ng configuration editor using Qt*". I am also contributing codes to the Mozilla community and Fedora community. Could you help me on getting started? Regards, Manikandan Selvaganesh.

1 0

Single host logs aren't being written
by Brandon Kendall 13 Mar '15

13 Mar '15

Hello everyone. I have a centralized syslog-ng server running that collect syslog messages from Cisco firewalls. The .conf file is very straightforward and contains the following: options { use_fqdn(no); use_dns(yes); dns_cache(yes); dns_cache_size(2000); dns_cache_expire(87600); keep_hostname(no); long_hostnames(no); flush_lines(0); normalize_hostnames(yes); create_dirs(yes); dir_group(group_name); dir_perm(0751); stats_freq(600); stats_level(1); group(group_name); perm(0640); }; source s_network_1 { udp(); }; destination d_network_1 { file ("/var/syslog/$R_YEAR-$R_MONTH-$R_DAY/$HOST/$R_YEAR-$R_MONTH-$R_DAY-$HOST-$R_HOUR.log"); }; log { source(s_network_1); destination(d_network_1); }; The goal is to have the logs from each device arranged in a hierarchy that is as follows (simplified): Date/device_name/hour-1.log Date/device/name/hour2.log etc This has been working great. Recently I configured another network device to send syslog messages to this server, and they aren't being logged. Using tcpdump on the syslog-ng box, I've verified the messages are making it to the server from the network device. They are UDP and using the correct port. I've compared the message format in the pcap to other devices that are still logging and everything matches. I have no errors in /var/log/syslog files, nor do I have errors in /var/log/messages. I've hit a dead end in troubleshooting, since all other devices sending logs to this server are being correctly written to log files. Can someone point me to anything else to check? This is syslog-ng 3.1.2 running on RHEL 5.8. Thanks!

2 4

Regarding syslog-ng server monitoring mobile application
by Amar Budhiraja 13 Mar '15

13 Mar '15

Hi, I am a junior undergraduate student currently pursuing computer science and engineering. I was looking at the GSoC ideas for syslog-ng and I found the idea of syslog-ng server monitoring with mobile app quite interesting. My skill set includes Java, C/C++, Python and Android. I have worked with android earlier and I have developed about 5 applications, 2 end-to-end and 3 prototypes. I have also been coding in Java for about 3 years now and have a pretty good understanding of the same. I do not have any coding knowledge regarding SSL control socket but I have worked with socket in C for a networks project, so I believe I can pick it up as and when required. As for syslog-ng, I installed and worked around it a little bit and I found myself to be quite comfortable with it at a user level. I believe building a mobile application would be relatively less codebase dependent and more couple in a API sort of way. I would like to contribute to this project over the summer. Could you please guide me where should I start? May be wireframing or a small demo app? Thank you Sincerely, Amar Budhiraja

2 3

Syslog-ng: GSoC2015: Project: Riak Destination
by Parth Oberoi 12 Mar '15

12 Mar '15

Hello everyone, I am a prospective gsoc 2015 applicant and wishes to apply to it under the New Destination Project -Riak Destination . @algernon-the mentor for this project gave me a few pointers to get started get started, so i have gone through the following things 1- compiled syslog-ng from source 2- went through the configuration docs(chapter 5), found it pretty interesting 3- Read up on the Google protocol Buffers and reading through the examples of its c library protobuf-c 4- did set up a single riak node()(will experiment with it after i set up the riak-c-client which i am currently installing) The things i am planning to do in the coming couple of days is to figure out the features of riak 2.0 that riak-c-client does not support and really would have to decide whether to use this library and implement the missing features or develop the new one . Only after this step can i lay down a project plan for the GSoC time period. Also i have working knowledge of C, lex and yacc (brushing them up these days). Any suggestions or tips or ideas would be welcome. I usually learn as i go and have a keen interest in new technologies,so any other prerequisite that i should have or that can help me in the project should be told. I am usually always online so i can be reached at htrapdev(a)gmail.com , irc nick: @htrap. Github: github.com/htrap Please let me know if any other details are required. looking forward to suggestions. Regards, Parth Oberoi

1 0

[GSoC '15] syslog-ng configuration editor using Qt
by Fábián Kristóf - Szabolcs 12 Mar '15

12 Mar '15

Hello, I'm currently studying at the University of Debrecen - Department of Informatics, I'm applying to the "syslog-ng configuration editor using Qt" project for syslog-ng. I've worked with Qt before in some home and university projects (like a traffic counter application using Qt <https://github.com/krajsz/Traffic-counter-with-OpenCV>), and contributed to a local project named Robocar World Championship ( http://justine.inf.unideb.hu/ ) and of course I'm comfortable with c++. I'm looking forward to work on this project. My question is that on what should I put more attention before proposing for this project? I guess the main target would be to get familiar with the syslog-ng configuration language. Thanks in advance, Fábián Kristóf

1 0

Parsing more than MSG macro
by Thomas Straubinger 12 Mar '15

12 Mar '15

Hello, is there a way to process more than the $MSG macro with a syslog-ng parse filter? We are forwarding our syslogs via rsyslog in this format (client config): $template tmpl_forward,"%hostname% %syslogtag% \"%msg%\"\n" *.* @@syslog:514;tmpl_forward I have created the following parser rule in syslog-ng: parser p_INTERNAL { csv-parser(columns("INTERNAL.TIME_LOGGED", "INTERNAL.TIME_RECEIVED", "INTERNAL.RELAY_HOST", "INTERNAL.LOGGING_HOST", "INTERNAL.PROGRAM", "INTERNAL.MESSAGE") flags(escape-double-char,strip-whitespace) delimiters(" ") quote-pairs('""[]') ); }; I want to create the logfile in this format: destination d_intern2 { file("/log-local/__OPS__/$YEAR-$MONTH/xxx-${INTERN.LOGGING_HOST}.log" ); }; Unfortunately, syslog-ng does not fill up the $MSG macro with the hole content provided by the client via "%hostname% %syslogtag% \"%msg%\"\n". So it's not possible to fill (parse) the desired 'INTERNAL.LOGGING_HOST' variable. How could i achieve, to, get the content of %hostname% (sent by rsyslog) into the 'INTERNAL.LOGGING_HOST' variable of syslog-ng? Thank you! Thomas

2 2

[GSOC'15 Intro] Python Language Binding
by Akash Gangil 11 Mar '15

11 Mar '15

Hi, I am applying to the "Python Language Binding" project for syslog-ng in this years GSOC' 15. I am going through the incubator code which has basic implementations. I wanted to know what level of detail are you guys expecting in the proposal? Or if there is any specific task you would want to screen applicants? As for myself, I am a second years Masters student at Georgia Tech. And have interfaced with quite a few things that are needed for this project. - I, in a team of 3, led <https://github.com/akashgangil/Tiger/graphs/contributors> the development of a compiler for a toy programming language as a part of the class project. https://github.com/akashgangil/Tiger - As a part of my research work, which deals with designing a data management and analytics system for scientific "big" data, I have also used <https://github.com/akashgangil/khanEVPath/blob/master/src/fileprocessor.cpp…> Python/C Api, to allow writing plugins in python, which can be consumed by the system. https://github.com/akashgangil/khanEVPath <https://github.com/akashgangil/khanEVPath> - I was also a GSOC student in 2009 for Tux4kids and a mentor in 2010 for the same. So I am pretty familiar with the program, - Beside I have extensively used tools like logstash, elasticsearch in the past and appreciate the problems that are associated with log data management and processing. This is also one of the reasons the project interests me. I am still going through the code and trying to get in more details for the proposal. Hoping to get something ready soon. Thanks! -- Akash

2 1