Hi, Possible to wipe up a sample config? Might clear things up? My apache is writing logs into /var/log/apache/www.contoso.com. This is for example one of my apache virtual host. Thanks in advance. Yours Sincerely, Delon Lee On Mon, 7 May 2018 at 23:57 Gergely Nagy <algernon@balabit.com> wrote:
"Delon" == Delon Lee Di Lun <lee.delon2005@gmail.com> writes:
Delon> In response to gergely, the 2nd option would require the changes to be made Delon> on the "apache side" of things right? If so, its unlikely possible in my Delon> use case.
No, you can do that with rsyslog and syslog-ng too. Both allow you to tinker with the syslog headers.
Ideally, changing the Apache-generated log format to conform to a syslog RFC would be ideal, but I understand that's not something most are willing - or able/allowed - to make. So the next best option is to fiddle with the syslog fields on the syslog side of things.
-- |8]