[syslog-ng] I am a novice on syslog-ng needs help.

[Laszlo Varady (lvarady)]

Hi,

This project might also be interesting to you as it is based on syslog-ng:
https://splunk.github.io/splunk-connect-for-syslog/main/

--
László Várady
________________________________
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu> on behalf of Szilárd Parrag <szilard.parrag at gmail.com>
Sent: Monday, June 20, 2022 16:54
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Subject: Re: [syslog-ng] I am a novice on syslog-ng needs help.

CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.

Hi Alex,

There's an APT repository for Debian based systems, see: https://github.com/syslog-ng/syslog-ng#installation-from-binaries<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsyslog-ng%2Fsyslog-ng%23installation-from-binaries&data=05%7C01%7Claszlo.varady%40balabit.com%7C02a92cad53744a78074d08da52ccc533%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637913336689447183%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=vqwut8pLz8dj35ElPm16EyKlYtdtJQdA7yobzaiiFc0%3D&reserved=0>

After that you should check out the Administration Guide:
https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition/3.36<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.syslog-ng.com%2Ftechnical-documents%2Flist%2Fsyslog-ng-open-source-edition%2F3.36&data=05%7C01%7Claszlo.varady%40balabit.com%7C02a92cad53744a78074d08da52ccc533%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637913336689447183%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=JOAVJBPl4hXxWrEsd73SYwCOM3Q4v4tn3WLOKiowSSo%3D&reserved=0>

Peter Czanik's syslog-ng blog contains small step-by-step tutorials, for example Splunk HEC:
https://www.syslog-ng.com/community/b/blog/posts/splunk-hec-sending-logs-using-program-destination-syslog-ng<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.syslog-ng.com%2Fcommunity%2Fb%2Fblog%2Fposts%2Fsplunk-hec-sending-logs-using-program-destination-syslog-ng&data=05%7C01%7Claszlo.varady%40balabit.com%7C02a92cad53744a78074d08da52ccc533%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637913336689447183%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=7K38mXUF7tjaCauaRvFHF2i9PaYh6ww6fsxRVeFFd0M%3D&reserved=0>

I hope this can you get started.

Cheers,
Szilard



On Mon, 20 Jun 2022, 16:26 Alexandre Adao, <Alexandre.Adao at morgan.edu<mailto:Alexandre.Adao at morgan.edu>> wrote:
Hello,

I am a novice on syslog-ng. I need some assistance on installing syslog-ng and looking for a good recommendation on step-by-step instructions for Ubuntu (prefered OS) or Windows environment. I googled it but I  My goal is to send the logs to splunk.
Any help would be appreciated.

Thanks,
--Alex

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=05%7C01%7Claszlo.varady%40balabit.com%7C02a92cad53744a78074d08da52ccc533%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637913336689447183%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=ZP60iojHLTqCy7JeP0wXdbsZcctICpdiUxYDvp5xDqk%3D&reserved=0>
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng<https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=05%7C01%7Claszlo.varady%40balabit.com%7C02a92cad53744a78074d08da52ccc533%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637913336689447183%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=b5wRjzd3DwUfYGmOSlWUWdwavCqTaqyRDMhBQI0IIEQ%3D&reserved=0>
FAQ: http://www.balabit.com/wiki/syslog-ng-faq<https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=05%7C01%7Claszlo.varady%40balabit.com%7C02a92cad53744a78074d08da52ccc533%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637913336689447183%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=EET1zYVNlNp796MuI1VCynCAI%2ByznYJ9hZDc0p2m3r8%3D&reserved=0>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20220620/af47ac04/attachment-0001.htm>