[syslog-ng] Error binding socket;
vinod samant
vinod.samant.123 at gmail.com
Mon May 14 13:08:16 UTC 2018
Hi Gergely,
My configuration my of both client and server side.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>client confg<<<<<<<<<<<<<<<<<<<<<<<<<<<
@version:3.13
@include "scl.conf"
@define allow-config-dups 1
#options {
# flush_lines (0);
# time_reopen (10);
# log_fifo_size (1000);
# chain_hostnames (off);
# use_dns (no);
# use_fqdn (no);
# create_dirs (no);
# keep_hostname (yes);
#};
source s_local {
system();
internal();
};
destination d_network {udp("192.168.122.67" port(514));
};
destination d_local {
file("/var/log/messages");
};
log{
source(s_local);
destination(d_network);
destination(d_local);
};
source s_local{
wildcard-file(
base-dir("/usr/local/apache/logs")
filename-pattern("*.log")
recursive(no)
follow-freq(1));
};
destination d_network {tcp("192.168.122.67" port(514));
};
log{
source(s_local);
destination(d_network);
};
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>server side
cong<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
@version:3.13
@include "scl.conf"
source s_local{system(); internal();};
source s_network{
udp();
tcp();
};
destination d_local{file("/var/log/messages");};
destination d_from_net{file("/var/log/from_net");};
log{
source(s_local);
destination(d_local);
};
log { source(s_network); destination(d_from_net); };
source s_net {
network(flags(no-parse));
};
parser p_apache {
csv-parser(
columns("apache.FILE_NAME", "apache.MESSAGE")
flags(greedy)
);
};
destination d_apache {
file("/usr/local/apache/logs/${apache.FILE_NAME}"
template("${apache.MESSAGE}\n"));
};
log{
source (s_net);
parser (p_apache);
destination(d_apache);
};
*Thanks & Regards :-*
*VINOD SINGH SAUD*
*(M):- 09718663552*
*(W):-09997645597*
*(E) :- vinod.samant.123 at gmail.com <vinod.samant.123 at gmail.com>*
On Mon, May 14, 2018 at 5:30 PM, Gergely Nagy <algernon at balabit.com> wrote:
> >>>>> "vinod" == vinod samant <vinod.samant.123 at gmail.com> writes:
>
> vinod> When i am going to comment those lines on server side
> ,syslog-ng is
> vinod> working fine ,But all logs are coming in one file
> vinod> */var/log/from_net .*
>
> Can you show us your *full* configuration, including any included config
> files? In the samples I showed, there is no `/var/log/from_net`, so my
> suspicion is that some other part of your configuration sets up a
> similar source, and a logpath that routes those logs elsewhere.
>
> vinod> *Is it necessary to define port in server side configuration
> vinod> file also?*
>
> No, it has a default port, and the client side will use the same default
> port when no port is specified. But if you do specify a different port
> on either side, the other one will have to be adapted too.
>
> vinod> *Can you share wildcard configuration for both server side and
> cilent
> vinod> side?*
>
> I did, a few messages ago.
>
> --
> |8]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180514/2b14f859/attachment.html>
More information about the syslog-ng
mailing list