[syslog-ng] Apache vhost logs

[Josu Lazkano]

Perfect!

The last last question, is it posible to NOT write on local5 file?

I have same info on the apache and local5 files.

Best regards.

-----Mensaje original-----
De: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] En nombre de Gergely Nagy
Enviado el: jueves, 14 de julio de 2011 12:06
Para: Syslog-ng users' and developers' mailing list
Asunto: Re: [syslog-ng] Apache vhost logs

Josu Lazkano <josu.lazkano at barcelonamedia.org> writes:

> filter f_local5 {
>         facility(local5);
> };
>
> destination d_apache {
>         file("/var/log/apache.log");
> };
>
> log {
>         source(s_all);
>         filter(f_local5);
>         destination(d_apache);
> };
>
> But I want to save the apache logs on a directory inside each host:
>
> destination extern {
>         file("/var/log/extern/${HOST}/${YEAR}-${MONTH}/${FACILITY}");
> };
>
>
> I wan tto change the name "local5" to "apache"

That's not possible like this.

However, since you already filter on f_local5, you can add another
destination, along side extern:

destination d_apache {
 file("/var/log/extern/${HOST}/${YEAR}-${MONTH}/apache");
};

(This would replace the d_apache you have in your configs now)

-- 
|8]

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq