I used this product a long time ago and it looks like its come a long way. I had one question - I want to deploy syslog-ng on my syslog box and then have all my other servers send standarad syslog message to it remotely (my enviornment in a mix of rhel 4, rhel 5, solaris 10, and sles 9) Can syslog-ng parse the standard syslog messages and route them to individual files per server w/o adding syslog-ng itself to the client systems? (otherwise leavfe syslogd intact on all my servers except the syslog box itself) Thanks, Chuck
Yes it can. --- James T. Richardson, Jr. jrichardson@x-iss.com eXcellence in IS Solutions, Inc. 713-862-9200 x226 Making IT Work for You HPC & Enterprise IT Solutions * HPC Application Acceleration * Cluster Design, Deploy, Manage, Train * Linux/Windows Integration * Remote Management, Backup, Anti-Spam/Virus * Network Assessments, Design * Security Audits, Design * Datacenter Design, Relocation * Messaging and Collaboration -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Chuck Sent: Thursday, December 13, 2007 3:50 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Noob Question I used this product a long time ago and it looks like its come a long way. I had one question - I want to deploy syslog-ng on my syslog box and then have all my other servers send standarad syslog message to it remotely (my enviornment in a mix of rhel 4, rhel 5, solaris 10, and sles 9) Can syslog-ng parse the standard syslog messages and route them to individual files per server w/o adding syslog-ng itself to the client systems? (otherwise leavfe syslogd intact on all my servers except the syslog box itself) Thanks, Chuck _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html NOTICE: This message may contain privileged or otherwise confidential information. If you are not the intended recipient, please immediately advise the sender by reply email and delete the message and any attachments without using, copying or disclosing the contents.
On Thu, 13 Dec 2007 13:49:52 PST, Chuck said:
I used this product a long time ago and it looks like its come a long way. I had one question - I want to deploy syslog-ng on my syslog box and then have all my other servers send standarad syslog message to it remotely (my enviornment in a mix of rhel 4, rhel 5, solaris 10, and sles 9) Can syslog-ng parse the standard syslog messages and route them to individual files per server w/o adding syslog-ng itself to the client systems?
Here's what I use: destination d_mesg { file("/logs/$HOST/$YEAR/$MONTH/messages-$YEAR-$MONTH$DAY"); }; $HOST gives me a directory per source, and the others give me automagic log rotation without needing a cron job. I'm currently catching from a large number of sources - Solaris 8 through 10, AIX, NetApp's OnTap, Linux (several distros), and even a few HP printers. It doesn't even need to be "standard" syslogd - all it needs for $HOST to work is the source IP address (and maybe a PTR entry in the DNS if you want it to log to readable hostnames rather than IP addresses).
participants (3)
-
Chuck
-
James Richardson
-
Valdis.Kletnieks＠vt.edu