I'd use a tree style log directory (/var/log/HOSTS/hostname/yyyy/mm/dd/loglevel), and then rsync to your central server when a connection is available. That way you're syncing full files, not one monolithic log file that changes while you read it. Russell On Wed, Aug 25, 2004 at 06:02:45PM +0200, Maarten Thibaut wrote:
Hi,
First of all, thanks for the neat software you guys make.
Our organization is rolling out a mobile pc platform, we want some types of log events stored on a centralized server which is only reachable from the inside of our corporate network.
So when the machine is not inside our network, the log entries need to be stored locally until such time as the centralized server is reachable. Then the logs get sent through.
Can we do this with syslog-ng? From the features listed at your home page it would seem this is a standard feature... Is that right?
-- maarten _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html