[syslog-ng] Collecting logs from a chrooted appli

[Gault Stephane]

Hi,
 
i'm curretly trying to get the logs of a chrooted application wich is under (/var/appli/) and logging in a file called appli.log (/var/appli/dev/log/appli.log). I tryed to create a /dev/log directory (and a /dev/log stream too, when the file didn't work) where the appli is logging. The application logging is ok, the file or stream work, but syslog-ng can't duplicate and create the appli.log in /var/log/appli.log or send tcp to the remote syslog server as well.
 
In the syslog-ng.conf i Tryed to add a local source :
 
source src_applilog { file("/var/appli/dev/log/appli.log"); }; 
 
(or for the stream) source src_applilog { unix-stream("/dev/log"); };
 
then duplicating the log :
 
destination appli { file("/var/log/appli.log"); };
 
then statement :
 
log { source(src_applilog); destination(appli); };
 
I don't want to filter anything in this log, but even if a tryed tu setup a unix-stream in /var/appli/dev/log with the application logging in this stream, nothing get the job done. I must duplicate the log outside the chroot (local then remote with a tcp syslog server listening).
 
Any clue of what am i doing wrong ?
 
Best regards.
 
S.gautch
_________________________________________________________________
Votre contact a choisi Hotmail, l'e-mail ultra sécurisé. Créez un compte gratuitement !
http://www.windowslive.fr/hotmail/default.asp
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080605/69a3b188/attachment.htm