[syslog-ng] Syslog-ng and tomcat6 & apache2 servers

[Vámos Balázs]

Ralf,

Here is how I did it with Apache on Linux.

1. I created a new LogFormat to include the virtual host name in access
log. Apache global config:
LogFormat "%v %h %m %U %>s %b %>D" syslog

2. I forwarded the access log and error log to syslog
CustomLog "|/usr/bin/logger -p local1.notice -t apache" syslog
ErrorLog syslog:local1

3. A forwarded facility local1 to my central syslog-ng server


This was my first method.
Currently I'm using a csv parser to parse the access log on client side
and I am sending to a log analyzer (LOGalyze) in json format. But if you
just want to collect them, you do not need to use this method.

Regards,

Balazs


On 01/27/2012 08:57 AM, Ralf W. wrote:
> Hello group -  Using syslog-ng as central syslog server.  I was ask to
> syslog all tomcat6, as well as apache2 servers using syslog-ng.  I
> followed some instructions on using sockets, but it doesn't work.  Can
> somebody please point me in the right direction or has any ideas on
> how to do this.
> Thank YOU,
>
> Ralf
>  
> The problem with troubleshooting is that trouble shoots back.
> - Ralf Wiegand 1999