[syslog-ng] Best way to pipe "application" logs to central syslog-ng server.
algernon at balabit.com
Mon May 7 15:58:46 UTC 2018
>>>>> "Delon" == Delon Lee Di Lun <lee.delon2005 at gmail.com> writes:
Delon> In response to gergely, the 2nd option would require the changes to be made
Delon> on the "apache side" of things right? If so, its unlikely possible in my
Delon> use case.
No, you can do that with rsyslog and syslog-ng too. Both allow you to
tinker with the syslog headers.
Ideally, changing the Apache-generated log format to conform to a syslog
RFC would be ideal, but I understand that's not something most are
willing - or able/allowed - to make. So the next best option is to
fiddle with the syslog fields on the syslog side of things.
More information about the syslog-ng