[syslog-ng]about syslog

[Harald Nesland]

Hello,

this is possible with syslog-ng. You can configure it to create a 
directory for each server, and let it store the log in different
files/category in their own directory.

For example, A logs to S, and syslog-ng at S stores the log to
/var/log/HOSTS/A/logfile locally on S.

I have this configured in my syslog-ng: 

destination hosts {
  file("/var/log/HOSTS/$HOST/$FACILITY/$YEAR/$MONTH/$DAY/$FACILITY$YEAR$MONTH$DAY"
	owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes));
};

log { source(src); destination(hosts); };


There is a mini-howto on http://www.campin.net/newlogcheck.html.

And it's no problem porting from syslogd to syslog-ng :)

cheers

> hi ,
> I have three machines A B and C which run syslog (not syslog-ng) and they
> send now their logs toward a remote host S.
> How is it possible with syslogd (running over S) to manage differents logs
> from A, B and C according to the log source (i.e create a file for log
> coming from A , an other file for log coming from B and an other file for
> C).
> the machine S, which receive logs is running syslogd , how can it manage the
> logs coming from the others machines according to their source.
> If syslog is not able to manage this , can syslog-ng do it?how?
> thanks
> 
> 

-- 
Harald Nesland
pryo@sacharis.no
http://www.sacharis.no/