[syslog-ng] Transmitting a Huge Log File

9 Mar 2011

      Hi all,

I'm trying to transmit a huge log file (of about 80k lines) to a centralized
syslog server over TCP

But, on the syslog server, I'm receiver only the last part of the log file
(of about 7000 lines)

How can I transmit the whole log file

On client, the syslog-ng.conf file ...

destination d_mydest {
    tcp("192.168.18.7" port(5140));
};

source s_src {
file("/some/huge/file.log" follow_freq(1) log_prefix("mylogs:"));
};

log {
source(s_src);
destination(d_mydest);
};

On server (192.168.18.7) , the conf file ...
source s_mysrc{
        tcp(ip("192.168.18.7") port(5140) keep-alive(yes));
};

filter f_filter{ match("mylogs:"); };
destination d_mydest {
        file
("/var/log/hosts/$HOST/$YEAR-$MONTH/$YEAR-$MONTH-$DAY/hugefile.log"
                owner(root) group(root) perm(0600) dir_perm(0700)
create_dirs(yes)
        );
};

log {
source(s_mysrc);
filter(f_filter);
destination(d_mydest);
};

Thanks and regards,
Hidayath

[syslog-ng] Transmitting a Huge Log File

Hidayath Basha