- syslog-ng - lists.balabit.hu

syslog-ng configuration editor using Qt
by siddharth singh 03 Mar '15

03 Mar '15

Hi Mentors, I was going through the idea page of syslog-ng and found this project (syslog-ng configuration editor using Qt) intriguing. I have a fair experience in Qt with python, but the project is C++ based. I would like to know if it could be done in python? Regards Siddharth Singh

1 0

GSOC 2015
by Amol Agrawal 02 Mar '15

02 Mar '15

Hello everyone, First of all congrats on being selected for GSOC 2015. Let me introduce myself. I am Amol Agrawal, a fourth year Information Technology undergraduate from Motilal Nehru National Institute of Technology, India. I read the project ideas for GSOC 2015 and the Configuration visualization project seems very interesting to me as I have been coding in C language for the last 4 years and have quite an experience with data structures. So can please anyone guide me how I should start? Regards, Amol.

1 0

Get host IP inside source { file ( ); } driver
by Thanuje Ashwin Nallaperuma 26 Feb '15

26 Feb '15

Hi, I want to read a file which is in the name of the IP of syslog-ng client machine I tried with $HOST macro source { file (/mnt/$HOST); }; But this does not work Any help on doing this ?

4 4

couple questions - geoip and also list archives
by jrhendri＠roadrunner.com 25 Feb '15

25 Feb '15

Hi, I would like to understand how the geoip module works, but cannot find any documentation (or really - any relevant source code so far). I assume it must use some downloaded database (or else it would seem like it would kill a local resolver) but cannot find anything describing it. Is anyone using it in reasonably high-performance environments? (like 5000+ events per second) Also, as I was looking for info, I cannot access the lists.balabit.hu archives (maybe I am *way* behind time, is this still maintained anywhere?) Thanks! Jim

6 8

Upcoming changes in unofficial packaging
by Gergely Nagy 23 Feb '15

23 Feb '15

Hi! I started packaging syslog-ng 3.6.1 for Debian and Ubuntu, to provide binaries at the usual[0] location. In the process, I intend to simplify and clean up the packaging considerably. This also means dropping support for a few older platforms. [0]: http://asylum.madhouse-project.org/projects/debian/ So beginning with 3.6.1, powerpc is going to be dropped, along with Debian Squeeze, and anything prior to Ubuntu Trusty (14.04) (mind you, I may need to add back Precise (12.04), for Travis CI). Furthermore, for Debian Wheezy, one will likely need to use the Debian backports repository[1] along with mine. [1]: http://backports.debian.org/Instructions/ I expect packages to be ready in a few days. -- |8]

3 4

PatternDB for a10?
by Daniel Neubacher 20 Feb '15

20 Feb '15

Hey there, I've really become a fan of patterndb and I'm migrating almost all of my grok filters to it. My next log devices to migrate are our a10 ax loadbalancer so I wanted to ask if anyone done this work before me :P Daniel -- Daniel Neubacher, Senior Network Engineer daniel.neubacher(a)xing.com<mailto:daniel.neubacher@xing.com> XING AG Dammtorstraße 30, 20354 Hamburg, Germany Tel. +49 40 419131-28, Fax +49 40 419131-11 Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 98807 Exec. Board (Vorstand): Dr. Thomas Vollmoeller (Vorsitzender), Ingo Chu, Jens Pape, Timm Richter Chairman of the Supervisory Board (Aufsichtsratsvorsitzender): Stefan Winners This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden and may be unlawful.

2 2

Setting log destination using the MAC address
by Tech Support 16 Feb '15

16 Feb '15

All; I am using syslog-ng to log both the local server and remote clients. Right now I log the clients like so and it works the way it should: destination d_remotehosts { file( "/var/log/HOSTS/$YEAR/$MONTH/$DAY/$HOST/$FACILITY.log" perm( 0644 ) create_dirs( yes ) dir_perm( 0755 ) ); }; However, it is not as helpful when multiple remote clients get recognized as $HOST = 192.168.x.x. Since most remote clients are IP phones, logging using the MAC address instead of the IP address would be much more valuable, but I don't see in the manual where that's possible. Is it possible to log using the MAC address? Any insight at all would be greatly appreciated. Thanks; John Tech Support Tech Support VoIP Business Solutions 240-215-3479 x325 <mailto:fsd@voipbusiness.us> support(a)voipbusiness.us

2 1

Send Apache log to a separate loghost
by Manning, Lee 13 Feb '15

13 Feb '15

In version 1.6.11 of syslog-ng, I need to send Apache logs to a different loghost than the rest of the system logs. Is that possible? If so, how? Our syslog-ng was set up quite some time ago by an admin who is no longer around. I've spent more time than I can afford trying to decipher and attempt to modify his syslog-ng.conf. Assistance from some experts would be greatly appreciated. Thanks, Lee

3 2

syslog-ng at Scale
by Czanik, Péter 10 Feb '15

10 Feb '15

Hi, Two of us from the syslog-ng team will be at Scale this year: http://www.socallinuxexpo.org/scale/13x and I'll also give a presentation about syslog-ng: https://www.socallinuxexpo.org/scale/13x/presentations/syslog-ng-log-collec… To receive a code for a 40% discount at Scale and a free syslog-ng t-shirt at our booth, please register at https://pages.balabit.com/SCALE_discount.html Bye, Peter Czanik (CzP) <peter.czanik(a)balabit.com> BalaBit IT Security / syslog-ng upstream http://czanik.blogs.balabit.com/ https://twitter.com/PCzanik

1 0

time jumps in logs
by Czanik, Péter 06 Feb '15

06 Feb '15

Hi, I was pointed to a Gentoo syslog-ng bugreport, which shows some interesting time travel: https://bugs.gentoo.org/show_bug.cgi?id=533328 My guess is, that it's something virtualisation related, but even if so, the report says that downgrading to 3.4 solved the problem. Anybody ran into something similar? Bye, Peter Czanik (CzP) <peter.czanik(a)balabit.com> BalaBit IT Security / syslog-ng upstream http://czanik.blogs.balabit.com/ https://twitter.com/PCzanik

1 0