[syslog-ng] 答复: Need help to send logs to a different server
Marc Andersen
man at inspektsecurity.com
Mon Dec 8 14:04:38 CET 2008
If the central syslog server is running syslog-ng you can just add another destination (live log server) to the already existing local files.
log{
source (udp/tcp incoming);
destination(new live log server);
};
cheers
/Marc
On 07/12/08 16.03, "Lavannya" <swap_project at yahoo.com> wrote:
Yes , from the client we can , but I think if you read my mail properly, I clearly written that my requirement is NOT, to get the logs from the client. I want to set one server , which will get all the information from the central log master. Yes , I know it can be done through ssh/rsync. But I wanted to know , if there is any option in syslog-ng .
Thanks
--- On Fri, 12/5/08, liuruihong <liuruihong at baidu.com> wrote:
> From: liuruihong <liuruihong at baidu.com>
> Subject: 答复: [syslog-ng] Need help to send logs to a different server
> To: swap_project at yahoo.com, "'Syslog-ng users' and developers' mailing list'" <syslog-ng at lists.balabit.hu>
> Date: Friday, December 5, 2008, 3:23 AM
> in the client,you can define many remote log server
> simultaneously.syslog
> and syslog-ng all support this function.
> You can find in the manual:)
>
>
> 谢谢!
>
> 刘蕊红 |sys|6758
>
> -----邮件原件-----
> 发件人: syslog-ng-bounces at lists.balabit.hu
> [mailto:syslog-ng-bounces at lists.balabit.hu] 代表 Swapna
> 发送时间: 2008年12月5日 4:17
> 收件人: syslog-ng at lists.balabit.hu
> 主题: [syslog-ng] Need help to send logs to a different
> server
>
> Hi,
>
>
> We have syslog-ng configuration as follows:
>
> - There are 50 clients communicating to one log server
>
> - The log server is kept in secured place where nobody
> have access
>
> - All the logs of 50 clients are coming to the log
> server and
> the logs are kept as follow
>
> /var/log/syslog-ng/<client
> host>/extended.log
>
>
> We want all the log of each client to relay into a
> seperate server live.
> Means the current log file of each host will go to the
> new server
> simultaneously as it is going to the central log server.
>
>
> We can configure a second log server like the existing
> one. But our
> requirement is, that all the logs will be received from
> the central log
> server not from the client hosts.
>
> Any help is really appreciated.
>
> Thanks
>
>
>
>
> ____________________________________________________________________________
> __
> Member info:
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20081208/010de719/attachment.htm
More information about the syslog-ng
mailing list