[syslog-ng] Alternate logging destination

[Matt Zagrabelny]

On Mon, 2006-11-06 at 16:49 +0100, Szeti, Balazs wrote:
> Hello!
> 
> Do you mean having more central servers?
> I'm rather affraid of loosing the network connection between the center
> and the edge node (dedicated private network).
> So I'd like to have the logs stored locally while the connection is not
> established.

i would then just have all the edge nodes log locally (as well as to the
central log server) and use a high frequency turnover rate with
logrotate to reduce disk usage on the nodes.

that would probably be the easiest solution.

otherwise you would have to test to see if the log server is alive
before sending the logs to it. it would be *much* easier to send the
logs to ther server as well as locally than testing if the log server is
"alive" and if it isnt log locally.

> 
> Balazs
> 
> -----Original Message-----
> From: syslog-ng-bounces at lists.balabit.hu
> [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Matt Zagrabelny
> Sent: Monday, November 06, 2006 4:41 PM
> To: syslog-ng at lists.balabit.hu
> Subject: Re: [syslog-ng] Alternate logging destination
> 
> On Mon, 2006-11-06 at 16:33 +0100, Szeti, Balazs wrote:
> > Hello!
> > 
> > I would like to design a centralized logging system with 50 edge nodes
> 
> > and one center.
> > It's quiet important to have all the logs even if the center is 
> > unreachable. Is there a way to configure syslog-ng to use an alternate
> 
> > destination? For example if the centralized TCP destionation server is
> 
> > down, the edge node syslog-ng may log in to a local file, so the logs 
> > can be reached later manually. When the center server in online again 
> > syslog-ng may log online again.
> 
> you could always do a HA cluster.
> 
> --
> Matt Zagrabelny - mzagrabe at d.umn.edu - (218) 726 8844 University of
> Minnesota Duluth Information Technology Systems & Services PGP key
> 1024D/84E22DA2 2005-11-07
> Fingerprint: 78F9 18B3 EF58 56F5 FC85  C5CA 53E7 887F 84E2 2DA2
> 
> He is not a fool who gives up what he cannot keep to gain what he cannot
> lose.
> -Jim Elliot
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
-- 
Matt Zagrabelny - mzagrabe at d.umn.edu - (218) 726 8844
University of Minnesota Duluth
Information Technology Systems & Services
PGP key 1024D/84E22DA2 2005-11-07
Fingerprint: 78F9 18B3 EF58 56F5 FC85  C5CA 53E7 887F 84E2 2DA2

He is not a fool who gives up what he cannot keep to gain what he cannot
lose.
-Jim Elliot
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20061106/26e4bba0/attachment.pgp