[syslog-ng]remote logging and logfile naming
Christian Hammers
ch@westend.com
Tue, 5 Mar 2002 11:31:24 +0100
Hello
I like to have the following logfile names:
/var/log/remote/proxy.d.westend.com.2002-03-05.log
or at least
/var/log/remote/212.117.2.4.2002-03-05.log
/var/log/remote/212.117.4.5.2002-03-05.log
etc.
Strangely, now I have a file
/var/log/remote/proxy.2002-03-05.log
which contains data from both, proxy.d.westend.com and proxy.westend.com.
And, in addition, when trying to turn of hostname lookup, all syslog-ng
exporters still have filenames with their short hostnames and all syslog
(old) exporters have IPs as hostnames!
/var/log/remote/proxy.2002-03-05
/var/log/remote/212.117.77.123.2002-03-05
(of course I restarted the server after each modification)
On all three syslog-ng hosts (2xProxy and 1xCollector) I use
syslog-ng-1.5.13. My collector config looks like this:
options {
long_hostnames(on);
use_dns(no);
use_fqdn(on);
keep_hostname(on)
chain_hostnames(on);
use_time_recvd(yes);
sync(0);
mark(120);
log_fifo_size(1000);
};
source remote { udp(); tcp(); };
destination westend_remote_hosts_dir { file("/var/log/remote/$HOST.$YE.....
Any ideas, how to archive "proxy.d.westend.com.2002-03-05.log"? The content
of the files is uninteresting, although chained hostnames would be nice
if I ever log over more than one host.
bye,
-christian-
--
Christian Hammers WESTEND GmbH - Aachen und Dueren Tel 0241/701333-0
ch@westend.com Internet & Security for Professionals Fax 0241/911879
WESTEND ist CISCO Systems Partner - Premium Certified