[syslog-ng] Best way to pipe "application" logs to central syslog-ng server.

Gergely Nagy algernon at balabit.com
Mon May 7 15:58:46 UTC 2018

>>>>> "Delon" == Delon Lee Di Lun <lee.delon2005 at gmail.com> writes:

    Delon> In response to gergely, the 2nd option would require the changes to be made
    Delon> on the "apache side" of things right? If so, its unlikely possible in my
    Delon> use case.

No, you can do that with rsyslog and syslog-ng too. Both allow you to
tinker with the syslog headers.

Ideally, changing the Apache-generated log format to conform to a syslog
RFC would be ideal, but I understand that's not something most are
willing - or able/allowed - to make. So the next best option is to
fiddle with the syslog fields on the syslog side of things.


More information about the syslog-ng mailing list