Ralf, Here is how I did it with Apache on Linux. 1. I created a new LogFormat to include the virtual host name in access log. Apache global config: LogFormat "%v %h %m %U %>s %b %>D" syslog 2. I forwarded the access log and error log to syslog CustomLog "|/usr/bin/logger -p local1.notice -t apache" syslog ErrorLog syslog:local1 3. A forwarded facility local1 to my central syslog-ng server This was my first method. Currently I'm using a csv parser to parse the access log on client side and I am sending to a log analyzer (LOGalyze) in json format. But if you just want to collect them, you do not need to use this method. Regards, Balazs On 01/27/2012 08:57 AM, Ralf W. wrote:
Hello group - Using syslog-ng as central syslog server. I was ask to syslog all tomcat6, as well as apache2 servers using syslog-ng. I followed some instructions on using sockets, but it doesn't work. Can somebody please point me in the right direction or has any ideas on how to do this. Thank YOU,
Ralf
The problem with troubleshooting is that trouble shoots back. - Ralf Wiegand 1999