Wyane, Of course logdog.pl works with syslog-ng. The config file example sent in the tarball is generously commented. If you need more help, let me know where in the installation you are at and what you want logdog to do and Ill try to help. Alex -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of wayne yu Sent: Wednesday, June 14, 2006 2:30 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Re: syslog-ng Digest, Vol 14, Issue 9 Hi Alex: The logdog works for the syslogd, does also working with syslog-ng? How do I configure it? Thanks Wayne Yu --- syslog-ng-request@lists.balabit.hu wrote:

Send syslog-ng mailing list submissions to syslog-ng@lists.balabit.hu

To subscribe or unsubscribe via the World Wide Web, visit https://lists.balabit.hu/mailman/listinfo/syslog-ng or, via email, send a message with subject or body 'help' to syslog-ng-request@lists.balabit.hu

You can reach the person managing the list at syslog-ng-owner@lists.balabit.hu

When replying, please edit your Subject line so it is more specific than "Re: Contents of syslog-ng digest..."

Today's Topics:

1. Losing TAG information (SOLIS, ALEX) 2. how to send alert throuth e-mail with syslog-ng (wayne yu) 3. RE: how to send alert throuth e-mail with syslog-ng (SOLIS, ALEX) 4. Re: how to send alert throuth e-mail with syslog-ng (sawall)

----------------------------------------------------------------------

Message: 1 Date: Tue, 13 Jun 2006 10:07:33 -0500 From: "SOLIS, ALEX" <asolis@oppd.com> Subject: [syslog-ng] Losing TAG information To: "Syslog-ng users' and developers' mailing list" <syslog-ng@lists.balabit.hu> Message-ID:

<3E061654BA925846A7FAFE98BA3603B71714C401@SEPEX04.oppd.oppd-ds.com>

Content-Type: text/plain; charset="us-ascii"

I have about 20 or so AIX 4.3 servers that are sending syslog messages to a Linux desktop running syslog-ng 1.6.5. Every now and then I get a message that does not contain the TAG information or process ID information. When I check the local /var/adm/messages file on the AIX server, the TAG information is intact.

An example of an intact message on an AIX server is:

Jun 13 09:57:11 myhost dbc4 : 3 TRANSACT 0 0 33686 57:11.60

An example of the same message on my syslog server after syslog-ng gets a hold of it:

Jun 13 09:57:11 myhost : 3 TRANSACT 0 0 33686 57:11.60

As you can see I am losing the dbc4, why? Could it be because of the spaces after the dbc4 string? According to RFC 3164, a space should simply terminate the TAG field and begin the content portion of the message. Am I misunderstanding how this works?

Thanks

Alex

This e-mail contains Omaha Public Power District's confidential and proprietary information and is for use only by the intended recipient. Unless explicitly stated otherwise, this e-mail is not a contract offer, amendment, nor acceptance. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

------------------------------

Message: 2 Date: Tue, 13 Jun 2006 12:19:46 -0700 (PDT) From: wayne yu <zwyu7319@yahoo.com> Subject: [syslog-ng] how to send alert throuth e-mail with syslog-ng To: syslog-ng@lists.balabit.hu Message-ID:

<20060613191946.39833.qmail@web35910.mail.mud.yahoo.com>

Content-Type: text/plain; charset=iso-8859-1

Hi everyone:

I like to thank those who helped me on the syslog-ng earlier, and my syslog-ng is finally working, except I don't know how to send alerts from system to my yahoo mail. Can any one give me some hints.

Thanks for the help.

Wayne Yu

__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

------------------------------

Message: 3 Date: Tue, 13 Jun 2006 14:53:28 -0500 From: "SOLIS, ALEX" <asolis@oppd.com> Subject: RE: [syslog-ng] how to send alert throuth e-mail with syslog-ng To: "Syslog-ng users' and developers' mailing list" <syslog-ng@lists.balabit.hu> Message-ID:

<3E061654BA925846A7FAFE98BA3603B71714C508@SEPEX04.oppd.oppd-ds.com>

Content-Type: text/plain; charset="us-ascii"

I use a perl script called logdog to alert on specific syslog events. You can find the script here: http://caspian.dotconf.net/menu/Software/LogDog/

Works good for me, check it out.

Alex

-----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of wayne yu Sent: Tuesday, June 13, 2006 2:20 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] how to send alert throuth e-mail with syslog-ng

Hi everyone:

I like to thank those who helped me on the syslog-ng earlier, and my syslog-ng is finally working, except I don't know how to send alerts from system to my yahoo mail. Can any one give me some hints.

Thanks for the help.

Wayne Yu

__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

This e-mail contains Omaha Public Power District's confidential and proprietary information and is for use only by the intended recipient. Unless explicitly stated otherwise, this e-mail is not a contract offer, amendment, nor acceptance. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

------------------------------

=== message truncated === __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html This e-mail contains Omaha Public Power District's confidential and proprietary information and is for use only by the intended recipient. Unless explicitly stated otherwise, this e-mail is not a contract offer, amendment, nor acceptance. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.