Problem reading the source file("/etc/httpd/logs/access_log")
Hi All , I have installed the syslog-ng 1.6.5 In configuration file I have defined source as the /etc/httpd/logs/access_log and destination as the terminal : /dev/tty1 Syslog-ng get started with no problem but it doesnot logs the information from the access_log file or any other log file ... i think thr is problem reading the file (but syslog-ng does not give any error) ... Plz help me out Thanks in advance torpedo
That is not a valid syslog source. No variation of options will make that work all by itself. A sample of your configuration would be helpful... The 'file()' souce driver is explained here: http://www.balabit.com/products/syslog_ng/reference/reference.html#AEN279 The above reference demonstrates a method to feed web server logs into syslog-ng. Never having done it myself, I can only hope the documentation is up-to-date and correct. On Tue, 7 Dec 2004 22:44:51 -0600, torpedo <torpedo@bluebottle.com> wrote:
I have installed the syslog-ng 1.6.5 In configuration file I have defined source as the /etc/httpd/logs/access_log and destination as the terminal : /dev/tty1
Syslog-ng get started with no problem but it doesnot logs the information from the access_log file or any other log file ... i think thr is problem reading the file (but syslog-ng does not give any error) ... Plz help me out
The easiest way to get your apache logs into syslog is to simply enable the syslog option in apache. For example: ErrorLog syslog[:facility] Where facility is a valid syslog facility. Note that when you do this, apache will no longer write a file out, but will ONLY log to syslog. -- ____________________________________________ Joe Reeves Security Engineer II, IDS Regions Technology Risk Management Office: 334-956-6189 joe.reeves@regions.com ____________________________________________ "To err is human, but to really foul things up requires a computer." ~ Farmers' Almanac, 1978 Jay Guerette <jayguerette@gmail.com> Sent by: syslog-ng-admin@lists.balabit.hu 08/12/2004 19:26 Please respond to syslog-ng@lists.balabit.hu To syslog-ng@lists.balabit.hu cc Subject Re: [syslog-ng]Problem reading the source file("/etc/httpd/logs/access_log") That is not a valid syslog source. No variation of options will make that work all by itself. A sample of your configuration would be helpful... The 'file()' souce driver is explained here: http://www.balabit.com/products/syslog_ng/reference/reference.html#AEN279 The above reference demonstrates a method to feed web server logs into syslog-ng. Never having done it myself, I can only hope the documentation is up-to-date and correct. On Tue, 7 Dec 2004 22:44:51 -0600, torpedo <torpedo@bluebottle.com> wrote:
I have installed the syslog-ng 1.6.5 In configuration file I have defined source as the /etc/httpd/logs/access_log and destination as the terminal : /dev/tty1
Syslog-ng get started with no problem but it doesnot logs the information from the access_log file or any other log file ... i think thr is problem reading the file (but syslog-ng does not give any error) ... Plz help me out
syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
That is only for error logs, but does not apply to access logs, which is what he was looking for. On Thu, 9 Dec 2004 09:00:43 -0600, Joe.Reeves@regions.com <Joe.Reeves@regions.com> wrote:
The easiest way to get your apache logs into syslog is to simply enable the syslog option in apache. For example: ErrorLog syslog[:facility]
Where facility is a valid syslog facility. Note that when you do this, apache will no longer write a file out, but will ONLY log to syslog.
That was an _Example_. Here's the apache directive for the access logs: TransferLog syslog[:facility] This is all very basic apache config. Please see here for more: http://httpd.apache.org/docs-2.0/mod/directives.html cheers, -- ____________________________________________ Joe Reeves Security Engineer II, IDS Regions Technology Risk Management Office: 334-956-6189 joe.reeves@regions.com ____________________________________________ "To err is human, but to really foul things up requires a computer." ~ Farmers' Almanac, 1978 Jay Guerette <jayguerette@gmail.com> Sent by: syslog-ng-admin@lists.balabit.hu 09/12/2004 09:50 Please respond to syslog-ng@lists.balabit.hu To syslog-ng@lists.balabit.hu cc Subject Re: [syslog-ng]Problem reading the source file("/etc/httpd/logs/access_log") That is only for error logs, but does not apply to access logs, which is what he was looking for. On Thu, 9 Dec 2004 09:00:43 -0600, Joe.Reeves@regions.com <Joe.Reeves@regions.com> wrote:
The easiest way to get your apache logs into syslog is to simply enable the syslog option in apache. For example: ErrorLog syslog[:facility]
Where facility is a valid syslog facility. Note that when you do this, apache will no longer write a file out, but will ONLY log to syslog.
syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
Um.... perhaps I'm confused; but the arguments for TransferLog from the page you referenced are listed as 'file|pipe'. Further, the word 'syslog' does not even appear anywhere on the page. The only place the word 'syslog" is used, in all of the Apache documentation, is in reference to error logging. On Thu, 9 Dec 2004 11:04:17 -0600, Joe.Reeves@regions.com <Joe.Reeves@regions.com> wrote:
That was an _Example_. Here's the apache directive for the access logs:
TransferLog syslog[:facility]
This is all very basic apache config. Please see here for more: http://httpd.apache.org/docs-2.0/mod/directives.html
participants (3)
-
Jay Guerette
-
Joe.Reeves＠Regions.com
-
torpedo