[syslog-ng]Configure syslog-ng to act as a central logging
server
Ryan McCain
syslog-ng@lists.balabit.hu
Thu, 31 Mar 2005 10:23:46 -0600
What is the destination? This syntax is wickedly confusing to me.
Thanks, Ryan
>>>Bill Nash <billn@billn.net> 03/31 10:26 am >>>
You'll need a log() directive that includes the destination.
The basic path is:
Log Source -> Optional Filter -> Destination.
- billn
On Thu, 31 Mar 2005, Ryan McCain wrote:
>Bill,
>
>So I can simply add this to my conf. file (modifying owner, group,
perm,
>dir_perm of course) and it will start accepting logs from remote
>servers?
>
>
>Where do I specify which hosts to accept logs from (I'd prefer not to
>use tcp wrappers)?
>
>Thanks again,
>Ryan
>
>>>>Bill Nash <billn@billn.net> 03/31 10:15 am >>>
>On Thu, 31 Mar 2005, Ryan McCain wrote:
>
>>I'm starting to understand the syntax. However, what part of this
>>statement tells syslog-ng to create a file for each host its receiving
>>logs from?
>
>>destination hosts {
>>file("/var/syslog/HOSTS/$HOST/$YEAR/$MONTH/$HOST-$FACILITY-$YEAR$MONTH$DAY"
>
>>owner(bob) group(llamafood) perm(0755) dir_perm(0755)
>create_dirs(yes));
>
>
>If the file doesn't exist, it will be created. If the directory doesn't
>exist, you need the create_dirs directive.
>
>- billn
>