Need help with having Syslog-ng import a log file into syslog-ng
Need help with having Syslog-ng import a log file into Syslog-ng. I have a proxy server that will not syslog but will log to a file than can ftp of the server. I am wondering how I can take the ftped file and send it to the Syslog-ng so It can be sysloged to our database server for review? Any help would be great? Thanks.
On Fri, 2006-11-17 at 10:26 -0600, Steven Meacham wrote:
Need help with having Syslog-ng import a log file into Syslog-ng. I have a proxy server that will not syslog but will log to a file than can ftp of the server. I am wondering how I can take the ftped file and send it to the Syslog-ng so It can be sysloged to our database server for review? Any help would be great? Thanks.
syslog-ng 2.0.x can follow files like this, using the file source and the follow_freq option. However it'll currently lose current position across restarts, that still needs to be fixed. If you are interested in testing this feature, I might move the priority of this change higher in my head :) -- Bazsi
I am really interested!!! -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: Friday, November 17, 2006 10:39 AM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] Need help with having Syslog-ng import a log fileinto syslog-ng On Fri, 2006-11-17 at 10:26 -0600, Steven Meacham wrote:
Need help with having Syslog-ng import a log file into Syslog-ng. I have a proxy server that will not syslog but will log to a file than can ftp of the server. I am wondering how I can take the ftped file and send it to the Syslog-ng so It can be sysloged to our database server for review? Any help would be great? Thanks.
syslog-ng 2.0.x can follow files like this, using the file source and the follow_freq option. However it'll currently lose current position across restarts, that still needs to be fixed. If you are interested in testing this feature, I might move the priority of this change higher in my head :) -- Bazsi _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
Have you tried just writing a program in script or something to read the logfile for changes, make sure each log is in the right format and then send it over the network to syslog-ng the way a normal network logger would? Although there is an easier way as well. Try installing syslog-ng on that machine, define a source as the file and then define the destination as the remote logserver. That should do it. -h Hari Sekhon Steven Meacham wrote:
Need help with having Syslog-ng import a log file into Syslog-ng. I have a proxy server that will not syslog but will log to a file than can ftp of the server. I am wondering how I can take the ftped file and send it to the Syslog-ng so It can be sysloged to our database server for review? Any help would be great? Thanks.
------------------------------------------------------------------------
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
Hi, Steven Meacham <smeacham@charter.net> [20061117 10:26:17 -0600]:
Need help with having Syslog-ng import a log file into Syslog-ng. I have a proxy server that will not syslog but will log to a file than can ftp of the server. I am wondering how I can take the ftped file and send it to the Syslog-ng so It can be sysloged to our database server for review? Any help would be great? Thanks.
ewwwwwww. Change proxy server :) Squid is really nice to syslog with :) If its a UNIX box you could still run syslog-ng, get your proxy to log to a pipe device. http://www.balabit.com/products/syslog_ng/reference-2.0/syslog-ng.html/index... If its not even windoze supports pipes and you could write some code to generate the simple UDP syslog messages and send them to a central server. Remove FTP from the loop, or any file transfer protocol; even the network filesystems. You are making it too complicated. Cheers Alex
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
participants (4)
-
Alexander Clouter
-
Balazs Scheidler
-
Hari Sekhon
-
Steven Meacham