[syslog-ng] syslog-ng 3.1.3-2 - working examples of remote logging

[Bill Anderson]

On Jan 20, 2011, at 12:17 PM, Steven Shepherd wrote:

OK, so syslog has come a long way and many configuration changes in the years :)

Can someone provide working examples of  (3.1.X) client/server syslog-ng.conf set up for remote logging purposes such as /var/log/messages, /var/log/kern.log, /var/log/auth.log...etc?  Would want on local machine as well as remote syslog server.   Will also want to remotely log apache access/error log via syslog-ng as well.  Any help/tips/pointers is greatly appreciated!


For Apache access logs I'd recommend piping to the logger command. I actually do that for error logs as well so they can be separated out. Use logger's "-t <name>" option to specify access vs. error and it is easy to catch them in syslog-ng. Note that if you customize your access log to the point that the messages could be large (as in recording the User agent) you may want to modify logger's source to have it submit the larger messages.

Cheers,
Bill

--
Bill Anderson, RHCE
Linux Systems Engineer
bill.anderson at bodybuilding.com<mailto:bill.anderson at bodybuilding.com>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20110121/e70f3edf/attachment.htm