Hello, i'm IT technical at CNRSt Morocco. I work on a project to centralize logs with syslog-ng , but so some logs are dropped . I have 10 clients and on each client over 12 website is hosted. thank you to find attached the config file. thanks. Cordialement. ---------------------------------------------------------------------------------------------------------------------------------------------- Thami Guamar Service informatique Institut Marocain de l'Information Scientifique et Technique (IMIST)- Centre National pour la Recherche Scientifique et Technique (CNRST) Angle avenue Allal El Fassi, avenue des FAR,Quartier Hay Ryad B.P. 8027 Rabat-Nations Unies 10102 Rabat, Maroc E-mail :guamar@imist.ma Tél : (212) 5 37 56 99 00/36 Fax : 212 5 37 56 99 01
Centralizing logging from Apache may not be a good fit for syslog-ng, I'd instead consider aggressively rotating logs on each server where the websites are hosted, then use a file-based transfer mechanism.
Hi, recent syslog-ng versions should be fast enough to follow http access log files, but I give you that transferring compressed files can be more performant, although the latency is definitely higher. (in the order of minutes instead of seconds). Cheers, Bazsi On Mon, Dec 15, 2014 at 3:25 PM, Kevin Kadow <kkadow@gmail.com> wrote:
Centralizing logging from Apache may not be a good fit for syslog-ng, I'd instead consider aggressively rotating logs on each server where the websites are hosted, then use a file-based transfer mechanism.
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Bazsi
Dear Thami Guamar, You should use flags(flow-control) in your log paths if you don't want to get dropped messages. Best Regards, Viktor Juhasz On Mon, Dec 15, 2014 at 3:09 PM, <guamar@imist.ma> wrote:
Hello,
i'm IT technical at CNRSt Morocco.
I work on a project to centralize logs with syslog-ng , but so some logs are dropped .
I have 10 clients and on each client over 12 website is hosted.
thank you to find attached the config file.
thanks. Cordialement.
----------------------------------------------------------------------------------------------------------------------------------------------
*Thami Guamar*
*Service informatique*
*Institut Marocain de l'Information Scientifique et Technique (IMIST)-*
*Centre National pour la Recherche Scientifique et Technique (CNRST)*
*Angle avenue Allal El Fassi, avenue des FAR,Quartier Hay Ryad B.P. 8027 Rabat-Nations Unies*
*10102 Rabat, Maroc*
*E-mail :guamar@imist.ma <guamar@imist.ma>*
*Tél : (212) 5 37 56 99 00/36 *
*Fax : 212 5 37 56 99 01 *
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
participants (4)
-
Balazs Scheidler
-
guamar@IMIST.MA
-
Juhász, Viktor
-
Kevin Kadow