[syslog-ng] Syslog relay tag
Gault Stephane
hqservers at hotmail.com
Thu Sep 18 11:22:18 CEST 2008
Well doesn't work for me here's the detail :
BOX1: 192.168.5.80 : hostname= APP_80
BOX2: 192.168.5.65 : hostname= APP_65
Syslog server: 192.168.5.203
config file :
BOX1: APP_80
options { chain_hostnames(yes); keep_hostname(no) long_hostnames(off); sync(0); stats(43200); perm(0640); create_dirs(yes); use_fqdn(yes);};
destination syslog_server { tcp("192.168.5.65" port(514)); };
BOX2: APP_65
options { chain_hostnames(yes); keep_hostname(yes); long_hostnames(off); sync(0);
stats(43200); perm(0640); create_dirs(yes); use_fqdn(yes);};
destination syslog_server { tcp("192.168.5.203" port(514)); };
And My syslog server: 203:
options { chain_hostnames(yes); keep_hostname(yes); long_hostnames(off); sync(0);
stats(43200); perm(0640); create_dirs(yes); use_fqdn(yes);};
And i get those king of logs when i generate some log on APP_880:
Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/lifecycle.html HTTP/1.1" 200 2620Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/objectcreation.html HTTP/1.1" 200 8047Sep 18 12:41:39 App_65 192.168.5.52 - - [18/Sep/2008:12:41:37 +0200] "GET /tutorial4/java/javaOO/usingobject.html HTTP/1.1" 200 10133
It see the hostname of the relay box and my IP as the generator of the logs, but doesn't indicate de real source of logs : APP_80 ou 192.168.5.80.
Any clue of what an i doing wrong ?
S.Gault
_________________________________________________________________
Téléphonez gratuitement à tous vos proches avec Windows Live Messenger ! Téléchargez-le maintenant !
http://www.windowslive.fr/messenger/1.asp
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080918/c26ddd40/attachment.htm
More information about the syslog-ng
mailing list