[syslog-ng] Logging Third party application logs to Syslog-NG

[Balazs Scheidler]

On Fri, 2007-08-17 at 11:37 +0800, Wilson Lai wrote:
> Dear Bill,
>         If there is a Scalix application which generate the log file in 
> "/var/opt/Scalix/ml/s/logs/fatal", where "fatal" is the log file. How 
> could
> the source be defined to be listened by Syslog-NG?

source s_file { file("/var/opt/Scalix/ml/s/logs/fatal" follow_freq(1)); };

This will read the log file, checking every second if there are new 
entries. The current position is remembered accross restarts.

You need a recent syslog-ng version though (2.0.5 is fine)

Read
http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch08s01.html#id2550287 for more information.

-- 
Bazsi