Hello, How do i enable send apache logs on syslog-ng client? Im using centos5 the default location of logs are /var/log/httpd/access_log and /var/log/httpd/error_log? any ideas. tnx Here's my syslog-ng client configuration source log002 { unix-stream("/dev/log" max_connections(1000)); internal(); }; destination splunk {udp("x.x.x.x" port(514));}; log { source(log002); destination(splunk); };
john.li@fifasci.com.ph wrote:
Hello, How do i enable send apache logs on syslog-ng client? Im using centos5 the default location of logs are /var/log/httpd/access_log and /var/log/httpd/error_log? any ideas. tnx
The ErrorLog directory can direct entries to syslog, but the others (access log, rewrite log etc) cannot. You would need some custom scripting. /Per Jessen, Zürich
The ErrorLog directory can direct entries to syslog, but the others (access log, rewrite log etc) cannot. You would need some custom scripting.
You can invoke trickery-pokery; pipe directly to `logger` or whatever script you prefer: http://httpd.apache.org/docs/2.2/logs.html#piped Or else, create a named pipe, write your logs to it (configure AccessLog as if it were a real file), and write a Syslog-NG source blurb to pull logs from it using pipe(). Should you want to try this, make sure Syslog-NG is restarted _before_ apache so that the named pipe has a reader (if not, apache will hang at start). -- --====|====-- --------================|================-------- Patrice Levesque http://ptaff.ca/ syslog-ng.wayne@ptaff.ca --------================|================-------- --====|====-- --
john.li@fifasci.com.ph wrote:
Hello, How do i enable send apache logs on syslog-ng client? Im using centos5 the default location of logs are /var/log/httpd/access_log and /var/log/httpd/error_log? any ideas. tnx
The ErrorLog directory can direct entries to syslog, but the others (access log, rewrite log etc) cannot. You would need some custom scripting.
/Per Jessen, Zürich
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
How do i do that in httpd config and also in syslog-ng?
participants (3)
-
john.li＠fifasci.com.ph
-
Patrice Levesque
-
Per Jessen