aha.. Thanks! It isn`t necessery to set up local logging, is it? I only wants everything to be sent out via UPD and nothing to be stored locally.. /Jon
-----Original Message----- From: Nate Campi [mailto:nate@campin.net] Sent: 4. desember 2002 16:40 To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng]centralized syslog-server.
On Wed, Dec 04, 2002 at 04:04:08PM +0100, Jon Hofstad wrote:
So my host-config only pushes out the syslog-messages that
spesifies that it
wants to be sent to the remote host?
Then my question is, how should I configure the host to send out all messages generated, to a remote syslog-server?
# set up logging to loghost destination loghost { udp("10.0.0.1" port(514)); };
# send everything to loghost, too log { source(src); destination(loghost); };
-- Nate Campi http://www.campin.net
To sysadmin or not to sysadmin... that is the question, whether tis nobler in the minde to suffer the slings and arrowes of outragious fortune, or climb to the top of the building with a high-power rifle and scope.
On Wed, Dec 04, 2002 at 04:53:35PM +0100, Jon Hofstad wrote:
It isn`t necessery to set up local logging, is it? I only wants everything to be sent out via UPD and nothing to be stored locally..
Then your whole syslog-ng.conf can be like this: --------------- options { long_hostnames(off); }; source src { unix-stream("/dev/log"); internal(); }; # set up logging to loghost destination loghost { udp("10.0.0.1" port(514)); }; # send everything to loghost, too log { source(src); destination(loghost); }; --------------- Your src may be different and if you run linux you can shut down klogd and put in "pipe("/proc/kmsg");" to your source to read kernel messages directly, but you get the gist. -- Nate Campi http://www.campin.net The trouble with being punctual is that people think you have nothing more important to do.
participants (2)
-
Jon Hofstad
-
Nate Campi