On Mon, 2006-11-06 at 16:49 +0100, Szeti, Balazs wrote:
Hello!
Do you mean having more central servers? I'm rather affraid of loosing the network connection between the center and the edge node (dedicated private network). So I'd like to have the logs stored locally while the connection is not established.
i would then just have all the edge nodes log locally (as well as to the central log server) and use a high frequency turnover rate with logrotate to reduce disk usage on the nodes. that would probably be the easiest solution. otherwise you would have to test to see if the log server is alive before sending the logs to it. it would be *much* easier to send the logs to ther server as well as locally than testing if the log server is "alive" and if it isnt log locally.
Balazs
-----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Matt Zagrabelny Sent: Monday, November 06, 2006 4:41 PM To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] Alternate logging destination
On Mon, 2006-11-06 at 16:33 +0100, Szeti, Balazs wrote:
Hello!
I would like to design a centralized logging system with 50 edge nodes
and one center. It's quiet important to have all the logs even if the center is unreachable. Is there a way to configure syslog-ng to use an alternate
destination? For example if the centralized TCP destionation server is
down, the edge node syslog-ng may log in to a local file, so the logs can be reached later manually. When the center server in online again syslog-ng may log online again.
you could always do a HA cluster.
-- Matt Zagrabelny - mzagrabe@d.umn.edu - (218) 726 8844 University of Minnesota Duluth Information Technology Systems & Services PGP key 1024D/84E22DA2 2005-11-07 Fingerprint: 78F9 18B3 EF58 56F5 FC85 C5CA 53E7 887F 84E2 2DA2
He is not a fool who gives up what he cannot keep to gain what he cannot lose. -Jim Elliot _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
-- Matt Zagrabelny - mzagrabe@d.umn.edu - (218) 726 8844 University of Minnesota Duluth Information Technology Systems & Services PGP key 1024D/84E22DA2 2005-11-07 Fingerprint: 78F9 18B3 EF58 56F5 FC85 C5CA 53E7 887F 84E2 2DA2 He is not a fool who gives up what he cannot keep to gain what he cannot lose. -Jim Elliot