- syslog-ng - lists.balabit.hu

Making Logs Viewable as a Webpage
by Aaron Brown 14 Jan '02

14 Jan '02

First off, Congrats on making an awesome utility. I've used it in 2 nationwide networks utilizing over 200 Routers, servers and network appliances and its run rock solid. But I would like to make the logs viewable via a webpage for security purposes. Unfortunately the Logs come out as a continuous line when viewed as html. Basically I'd like to be able to add a html page break ,<br>, to the end of each log message as they are written. I'm sure its an easy fix, but I am by no means a programmer. If possible could you tell me which src file and line that holds the command that writes the actual syslog message to the file. Any help would be appreciated. Aaron

3 2

Re: syslog-ng digest, Vol 1 #612 - 6 msgs
by wireless 13 Jan '02

13 Jan '02

Dear Krishna, Seems that there is conflict in your installation. To install syslog-ng I recommend that u first install the libol. get the libol tar.gz file from the http://www.balabit.hu/en/downloads/syslog-ng/downloads/ . Choose suitable one. After installing the libol, proceed with the syslog-ng installation. Any difficulties? Do write it in again. Best Regards, Anup Sainju WorldLink Communications Kathmandu Nepal wireless(a)wlink.com.np www.wlink.com.np snalbh> Krishna wrote: snalbh> Hi, snalbh> I have been trying to install syslog-ng and during this phase I got snalbh> lot of error's.After installing libol I tried to install but thus time i snalbh> gave the path to where libol-config was. I got the binary file snalbh> syslog-ng in the src directory. snalbh> But when I do make install it says "noting to be done in this directory" snalbh> and quit. snalbh> I am not getting syslog-ng.conf in the /etc.There is no directory of snalbh> syslog-ng in the /etc directory snalbh> Please Help snalbh> Any help would be appreciated snalbh> regards snalbh> Krishna Shekhar snalbh> Network Administrator snalbh> Wiplash.com snalbh> http://wiplash2000.com snalbh> _______________________________________________ snalbh> --__--__-- snalbh> Message: 2 snalbh> Date: Fri, 11 Jan 2002 18:00:55 +0545 snalbh> From: wireless <wireless(a)wlink.com.np> snalbh> Reply-To: wireless <wireless(a)wlink.com.np> snalbh> Organization: Worldlink Communnications snalbh> To: syslog-ng(a)lists.balabit.hu snalbh> Subject: [syslog-ng]to receive log messages from remote terminals. snalbh> Reply-To: syslog-ng(a)lists.balabit.hu snalbh> Hello syslog-ng, snalbh> What should I fix in the conf file to receive log messages from snalbh> remote terminals. snalbh> Best regards, snalbh> wireless mailto:wireless@wlink.com.np snalbh> --__--__-- snalbh> Message: 3 snalbh> From: "Ohrberg, Mick" <Mick.Ohrberg(a)umb.com> snalbh> To: "'syslog-ng(a)lists.balabit.hu'" <syslog-ng(a)lists.balabit.hu> snalbh> Subject: RE: [syslog-ng]INSTALLATION PROBLEM <Can't get /etc/syslog-ng/sys log-ng.conf>>PLEASE HELP!!!!!! snalbh> Date: Fri, 11 Jan 2002 06:35:36 -0600 snalbh> charset="iso-8859-1" snalbh> Reply-To: syslog-ng(a)lists.balabit.hu snalbh> Krishna, snalbh> If there is no /etc/syslog-ng/syslog-ng.conf, I suggest you create one. snalbh> /Mick >> -----Original Message----- >> From: Krishna [mailto:Krishna_shekhar@gmx.net] >> Sent: Thursday, January 10, 2002 4:27 PM >> To: syslog-ng(a)lists.balabit.hu >> Subject: [syslog-ng]INSTALLATION PROBLEM <Can't get >> /etc/syslog-ng/syslog-ng.conf>PLEASE HELP!!!!!! >> >> >> >> >> Krishna wrote: >> >> Hi, >> I have been trying to install syslog-ng and during this >> phase I got >> lot of error's.After installing libol I tried to install but >> thus time i >> gave the path to where libol-config was. I got the binary file >> syslog-ng in the src directory. >> But when I do make install it says "noting to be done in >> this directory" >> and quit. >> I am not getting syslog-ng.conf in the /etc.There is no directory of >> syslog-ng in the /etc directory >> Please Help >> Any help would be appreciated >> >> regards >> Krishna Shekhar >> Network Administrator >> Wiplash.com >> snalbh> http://wiplash2000.com snalbh> _______________________________________________ snalbh> _______________________________________________ snalbh> syslog-ng maillist - syslog-ng(a)lists.balabit.hu snalbh> https://lists.balabit.hu/mailman/listinfo/syslog-ng snalbh> --__--__-- snalbh> Message: 4 snalbh> Date: Fri, 11 Jan 2002 09:49:18 -0500 snalbh> From: "Paul C. Williamson" <pwilliamson(a)mandtbank.com> snalbh> To: <syslog-ng(a)lists.balabit.hu> snalbh> Subject: [syslog-ng]Accepting messages from all devices (including Cisco) snalbh> Reply-To: syslog-ng(a)lists.balabit.hu snalbh> Ok, now that I've got it installed and running (thanks to all who snalbh> helped)...I have yet another question. snalbh> When starting syslog-ng (I'm on RedHat 7.2), it just reports that it snalbh> is starting Kernel Logger, but never reports that syslog-ng started. snalbh> Is this normal? snalbh> What am I missing? I modified the init.d script for syslog-ng and put it in the /etc/rc.d/init.d directory, and put syslog-ng.conf.RedHat into snalbh> /etc/syslog-ng directory. snalbh> I was also capturing all Cisco devices on my network with syslog, so snalbh> I added: snalbh> destination ciscol { file("/var/log/cisco.log"); }; snalbh> log { source(src1); filter(ciscof); destination(ciscol);}; snalbh> To capture all the cisco stuff. I did not modify the facility on the Cisco devices, but they are all set to source-interface loopback0. snalbh> Any ideas? snalbh> Thanks, snalbh> Paul snalbh> --__--__-- snalbh> Message: 5 snalbh> Date: Fri, 11 Jan 2002 09:30:12 -0700 snalbh> From: Brad Arlt <arlt(a)cpsc.ucalgary.ca> snalbh> To: syslog-ng(a)lists.balabit.hu snalbh> Subject: Re: [syslog-ng]INSTALLATION PROBLEM <Can't get /etc/syslog-ng/syslog-ng.conf>PLEASE HELP!!!!!! snalbh> Reply-To: syslog-ng(a)lists.balabit.hu snalbh> On Fri, Jan 11, 2002 at 03:57:17AM +0530, Krishna wrote: >> I have been trying to install syslog-ng and during this phase I got >> lot of error's.After installing libol I tried to install but thus time i >> gave the path to where libol-config was. I got the binary file >> syslog-ng in the src directory. >> But when I do make install it says "noting to be done in this directory" >> and quit. snalbh> I am not certain that "make install" does anthing. I have never snalbh> bothered to run it. Just "cp" the syslog-ng executable wherever you snalbh> feel like putting it. If you made libol dynamic, make sure it is snalbh> copied to the appropriate place as well. If you are uncertian whether snalbh> you need to copy libol use "ldd" on the syslog-ng executable. If you snalbh> see libol in the dynamic dependancy list, then you will need to snalbh> install libol. >> I am not getting syslog-ng.conf in the /etc. There is no directory of >> syslog-ng in the /etc directory >> Please Help >> Any help would be appreciated snalbh> You need to make your own syslog-ng.conf file. There are examples in snalbh> the doc directory of the syslog-ng source distribution (or there was snalbh> in the 1.4.x distribution). You will almost certainly have to alter snalbh> the samples, please consult the documentation to figure out how. snalbh> mkdir -p -m 750 /etc/syslog-ng snalbh> should solve your latter problem. snalbh> ---------------------------------------------------------------------------- snalbh> __o Bradley Arlt Security Team Lead snalbh> _ \<_ arlt(a)cpsc.ucalgary.ca University Of Calgary snalbh> (_)/(_) http://pages.cpsc.ucalgary.ca/~arlt/ Computer Science snalbh> --__--__-- snalbh> _______________________________________________ snalbh> syslog-ng maillist - syslog-ng(a)lists.balabit.hu snalbh> https://lists.balabit.hu/mailman/listinfo/syslog-ng snalbh> End of syslog-ng Digest -- Best regards, wireless mailto:wireless@wlink.com.np

1 0

INSTALLATION PROBLEM <Can't get /etc/syslog-ng/syslog-ng.conf>PLEASE HELP!!!!!!
by Krishna 11 Jan '02

11 Jan '02

Hi, I have been trying to install syslog-ng and during this phase I got lot of error's.After installing libol I tried to install but thus time i gave the path to where libol-config was. I got the binary file syslog-ng in the src directory. But when I do make install it says "noting to be done in this directory" and quit. I am not getting syslog-ng.conf in the /etc.There is no directory of syslog-ng in the /etc directory Please Help Any help would be appreciated regards Krishna Shekhar Network Administrator Wiplash.com http://wiplash2000.com

2 2

Accepting messages from all devices (including Cisco)
by Paul C. Williamson 11 Jan '02

11 Jan '02

Ok, now that I've got it installed and running (thanks to all who helped)...I have yet another question. When starting syslog-ng (I'm on RedHat 7.2), it just reports that it is starting Kernel Logger, but never reports that syslog-ng started. Is this normal? What am I missing? I modified the init.d script for syslog-ng and put it in the /etc/rc.d/init.d directory, and put syslog-ng.conf.RedHat into /etc/syslog-ng directory. I was also capturing all Cisco devices on my network with syslog, so I added: destination ciscol { file("/var/log/cisco.log"); }; log { source(src1); filter(ciscof); destination(ciscol);}; To capture all the cisco stuff. I did not modify the facility on the Cisco devices, but they are all set to source-interface loopback0. Any ideas? Thanks, Paul

1 0

RE: [syslog-ng]INSTALLATION PROBLEM <Can't get /etc/syslog-ng/sys log-ng.conf>PLEASE HELP!!!!!!
by Ohrberg, Mick 11 Jan '02

11 Jan '02

Krishna, If there is no /etc/syslog-ng/syslog-ng.conf, I suggest you create one. /Mick > -----Original Message----- > From: Krishna [mailto:Krishna_shekhar@gmx.net] > Sent: Thursday, January 10, 2002 4:27 PM > To: syslog-ng(a)lists.balabit.hu > Subject: [syslog-ng]INSTALLATION PROBLEM <Can't get > /etc/syslog-ng/syslog-ng.conf>PLEASE HELP!!!!!! > > > > > Krishna wrote: > > Hi, > I have been trying to install syslog-ng and during this > phase I got > lot of error's.After installing libol I tried to install but > thus time i > gave the path to where libol-config was. I got the binary file > syslog-ng in the src directory. > But when I do make install it says "noting to be done in > this directory" > and quit. > I am not getting syslog-ng.conf in the /etc.There is no directory of > syslog-ng in the /etc directory > Please Help > Any help would be appreciated > > regards > Krishna Shekhar > Network Administrator > Wiplash.com > http://wiplash2000.com _______________________________________________ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng

1 0

to receive log messages from remote terminals.
by wireless 11 Jan '02

11 Jan '02

Hello syslog-ng, What should I fix in the conf file to receive log messages from remote terminals. Best regards, wireless mailto:wireless@wlink.com.np

1 0

How to run syslog-ng
by Paul C. Williamson 11 Jan '02

11 Jan '02

I know I must be missing something... The docs aren't real clear on this, but to I remove the syslogd daemon and replace it with syslog-ng? I am able to compile it, but there isn't anything that says how to run it. Also, is there an archive of the mailing list? Thanks, Paul

2 1

RE: [syslog-ng]How to run syslog-ng
by Ohrberg, Mick 10 Jan '02

10 Jan '02

Paul, I have run them both in parallel, but the general idea is to stop using syslogd - syslog-ng is a replacement. /Mick > -----Original Message----- > From: Paul C. Williamson [mailto:pwilliamson@mandtbank.com] > Sent: Thursday, January 10, 2002 2:48 PM > To: syslog-ng(a)lists.balabit.hu > Subject: [syslog-ng]How to run syslog-ng > > > I know I must be missing something... > > The docs aren't real clear on this, but to I remove the > syslogd daemon > and replace it with syslog-ng? > > I am able to compile it, but there isn't anything that says > how to run it. > > Also, is there an archive of the mailing list? > > Thanks, > Paul > > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng >

1 0

RE: [syslog-ng]Messages from AIX 4.3.2 syslog always 'forwarded'
by Douwe Dijkstra 09 Jan '02

09 Jan '02

> > I just installed syslog-ng on a central loghost and it > seems to think that > > messages from AIX systems are 'forwarded'. > > > > Messages from AIX machines look like: > > Jan 4 10:00:20 pg forwarded from pg: > > > > Messages from Solaris machines look like: > > Jan 3 17:16:41 mailhost sshd[1386]: > > > > What is wrong here? > > It might be hostname chaining, but I seem to recall another AIX person > was having this issue a while ago. I would look the the mailing list > archive to see if the answer isn't there. I don't look after any AIX > boxes so I try not to remember these sorts of things. The mailing list archive is not searchable, so I browsed a few months back. Couldn't find anything usefull. Douwe

1 0

RE: [syslog-ng]Messages from AIX 4.3.2 syslog always 'forwarded'
by Douwe Dijkstra 09 Jan '02

09 Jan '02

I added this option, and it did not work. Douwe > options { chain_hostnames(no); }; > > in the syslog-ng.conf file, I think I solved the problem with this. > > > ---------- > > Von: Douwe Dijkstra[SMTP:Douwe.Dijkstra@i-pay.com] > > Antwort an: syslog-ng(a)lists.balabit.hu > > Gesendet: Freitag, 4. Januar 2002 14:03 > > An: syslog-ng(a)lists.balabit.hu > > Betreff: [syslog-ng]Messages from AIX 4.3.2 syslog > always 'forwarded' > > > > Hi there! > > > > I just installed syslog-ng on a central loghost and it > seems to think that > > messages from AIX systems are 'forwarded'. > > > > Messages from AIX machines look like: > > Jan 4 10:00:20 pg forwarded from pg: > > > > Messages from Solaris machines look like: > > Jan 3 17:16:41 mailhost sshd[1386]: > > > > What is wrong here? > > > > FYI: Using syslog-ng 1.4.14 on Solarix x86 8.0, AIX client > machines are > > 4.3.2, Solaris client machines are x86 7.0 or 8.0. > > All machines are in the loghost host file. > > > > Douwe > > > > > > _______________________________________________ > > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > > https://lists.balabit.hu/mailman/listinfo/syslog-ng > > > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng >

1 0