More then one application on same server
Hi, I have more then one applications running on my server which generates and sends logs to central server using syslog-ng, and I need to identify in the syslog that which log is coming from which application?? currently I can only identify the server name (as the source of orginating all logs) which mix all the logs. Can anybody please help me in solving my issue?? I am kind of stuck at this point. I will be thankful for any kind of help. B.R. Ash.
Hi, I have more then one applications running on my server which generates and sends logs to central server using syslog-ng, and I need to identify in the syslog that which log is coming from which application??
I think you should use the program() filter. Regards, Sandor -------------------------------------------------------- NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
Hi, Thank you very much for your reply. But as I am new in this so can you please be more specific that how can I use the Program() filter?? Let me again tell you my specific issue- I have a Tomcat server running and in that server I have 3 application or nodes that generates the logs and dump into tomcat server....Now when I use the syslog it gives me all the logs mix with the generating source name as the hostname (tomcat server)....but I want that syslog should give me the logs which has the field in it from which I can identify that this log is generated in this application and this is in other... So I hope I describe the problem to give you exact idea!! I will be thankful to you if you help me in this. B.R. Ash ________________________________ From: syslog-ng-bounces@lists.balabit.hu on behalf of Geller, Sandor (IT) Sent: Wed 4/4/2007 10:23 AM To: Syslog-ng users' and developers' mailing list Subject: RE: [syslog-ng] More then one application on same server
Hi, I have more then one applications running on my server which generates and sends logs to central server using syslog-ng, and I need to identify in the syslog that which log is coming from which application??
I think you should use the program() filter. Regards, Sandor -------------------------------------------------------- NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error. _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
Hi, Thank you very much for your reply. But as I am new in this so can you please be more specific that how can I use the Program() filter?? Let me again tell you my specific issue- I have a Tomcat server running and in that server I have 3 application or nodes that generates the logs and dump into tomcat server....Now when I use the syslog it gives me all the logs mix with the generating source name as the hostname (tomcat server)....but I want that syslog should give me the logs which has the field in it from which I can identify that this log is generated in this application and this is in other... So I hope I describe the problem to give you exact idea!! I will be thankful to you if you help me in this.
Could you show some lines from your log originating from different programs? I'm not familiar with tomcat, so I don't understand your issue exactly... Maybe the logs have a field which could be used to differentiate between your tomcat apps. Regards, Sandor -------------------------------------------------------- NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
participants (2)
-
Geller, Sandor (IT)
-
Talati, Ashish J