[syslog-ng] [Syslog-ng] Log particular actions and send specific files to a remote server

[Czanik, Péter]

Hi,
You can use the file source to read log files:
https://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.7-guides/en/syslog-ng-ose-v3.7-guide-admin/html-single/index.html#configuring-sources-file
Bye,

Peter Czanik (CzP) <peter.czanik at balabit.com>
Balabit / syslog-ng upstream
http://czanik.blogs.balabit.com/
https://twitter.com/PCzanik

On Tue, Jul 26, 2016 at 1:25 PM, Savakh S <sovakah at gmail.com> wrote:

> Hello everyone,
>
> I have two questions about syslog-ng:
>
> 1 - Is it possible to send to a remote syslog-ng server a particular log
> file, for example the following /var/log/network.log, and how we can do
> this?
>
> iface eth1 inet dhcp
>     ...
>     up echo $IFACE up $(date) >> /var/log/network.log
>     down echo $IFACE down $(date) >> /var/log/network.log
>
> 2 - Is it possible to log in real time a change occured a network
> interface ? For example a new open port. More generally, how can we log
> actions naturally not covered by syslog-ng in order to send to a remote
> server?
>
> Thank you for any help.
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160726/9323e56c/attachment.htm