[syslog-ng]syslog-ng

[Hong Tian]

Hi,

Our purpose is to set up a syslog-ng server to receive the log messages from
other unix servers (linux and solaris) based on each hostname.

I am setting syslog-ng 1.6 on Red Hat 7.3 for the first time. The compiling
installation looks ok (./configure, make, and make install) on both
libol-0.3.9 and syslog-ng-1.6.0rc1.

After compiling I copied a starup script and a syslog-ng.conf as followings:
# cp syslog-ng-1.6.0rc1/contrib/syslog-ng.conf.RedHat
/etc/syslog-ng/syslog-ng.conf
# cp syslog-ng-1.6.0rc1/contrib/init.d.RedHat-7.3 /etc/init.d/syslog-ng
# /etc/init.d/syslog stop
# /etc/init.d/syslog-ng start
   Starting syslog-ng: Cannot open configuration file 
   /usr/local/etc/syslog-ng/syslog-ng.conf for reading 
   Parse error reading configuration file, exiting. (line 1)
                                              [Failed]

Only after I moved syslog-ng.conf to /usr/local/etc/syslog-ng, syslog-ng
could start.
# mv /etc/syslog-ng/syslog-ng.conf /usr/local/etc/syslog-ng
# /etc/init.d/syslog-ng start
Starting syslog-ng:                           [ OK ]

(1) My question is why it forced me to use /usr/local/etc/syslog-ng instead
of default location of /etc/syslog-ng/syslog-ng.conf?

(2) After starting syslog-ng, I am trying to set up a basic config file to
receive log messages from each Unix servers based on hostname. I am look for
the good examples of a basic config file for my requirments. Could anyone
provide some information?

(3) I think that I only need to install syslog-ng on the central log server.
I don't need to install syslog-ng on every Unix servers, am I right? If I
don't need to install syslog-ng on each syslog-ng client, should I do
anything on each syslog-ng client? 

Thanks,
Hong