[syslog-ng] Best way to pipe "application" logs to central syslog-ng server.

[Delon Lee Di Lun]

Hi,

Possible to wipe up a sample config?
Might clear things up?

My apache is writing logs into /var/log/apache/www.contoso.com.

This is for example one of my apache virtual host.

Thanks in advance.

Yours Sincerely,
Delon Lee


On Mon, 7 May 2018 at 23:57 Gergely Nagy <algernon at balabit.com> wrote:

> >>>>> "Delon" == Delon Lee Di Lun <lee.delon2005 at gmail.com> writes:
>
>     Delon> In response to gergely, the 2nd option would require the
> changes to be made
>     Delon> on the "apache side" of things right? If so, its unlikely
> possible in my
>     Delon> use case.
>
> No, you can do that with rsyslog and syslog-ng too. Both allow you to
> tinker with the syslog headers.
>
> Ideally, changing the Apache-generated log format to conform to a syslog
> RFC would be ideal, but I understand that's not something most are
> willing - or able/allowed - to make. So the next best option is to
> fiddle with the syslog fields on the syslog side of things.
>
> --
> |8]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180508/c14e9b0e/attachment.html>