Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
333 views

nginx send log to remote syslog server

I wnat to send nginx access log to a remote syslog-ng server. I installed syslog-ng on each side (server-client). Client: 10.10.10.2 Server: 10.10.10.1 Some log files (messages,syslog,mail.log) are ...
2
votes
1answer
36 views

Preferred approaches to remote logging of a script / daemon?

I run a script as a daemon which gets started and stopped via /etc/init.d on a Raspberry Pi. For a number of reasons - including limited local file storage - I'd like to direct stdout and stderr from ...
4
votes
1answer
56 views

Seperate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
1
vote
1answer
441 views

syslog-ng won't write to log file - “No such file or directory”

I have set up a fresh instance of syslog-ng using the conf file included below. I can see that messages are trying to route to the right place (var/log/bash) when I look in val/log/messages. But I ...
0
votes
1answer
160 views

Failover with Syslog-ng?

Is it possible to set up a failover mechanism with Syslog-NG opensource edition? I want that the syslog-ng Daemon logs to a remote Loghost and switches to an other server if the first would go down ...
2
votes
2answers
2k views

Log every command typed in any shell: output (from logger function to syslog-ng/journald) contains duplicate entries for commands?

I installed syslog-ng to use on my desktop (Gentoo 64bit, upgraded to systemd i.e. was OpenRC before, with Openbox and Slim only) with my normal user to log all commands I type in the shell (bash ...
0
votes
2answers
75 views

Syslog-ng failover: logserver to local file

We want to use a central Logserver for our Webservers so we can manage everyhing on one machhine. I'm a bit scared of what happens if the network breaks or the Logserver is down. Is it possible that ...
1
vote
0answers
85 views

ssh log sent to email in Cygwin

I am using Cygwin in Windows 7. I am trying to make my syslog-ng daemon send a ssh log via email to me when ever someone tries to log into my computer. I tried using the code below (entered into ...
2
votes
1answer
279 views

Syslog TLS Compression and Message Buffering

Where I work, we have a site-to-site VPN tunnel set up between our main data center and a third party data center that does some Oracle PaaS for us. Since they charge per-VM, we're monitoring the ...
1
vote
1answer
126 views

syslog-ng ignores MSSQL database name

syslog-ng ignores the database defined in syslog-ng.conf and instead uses the default database of the user when logging to MSSQL destination. destination d_mssql { sql(type(mssql) ...
1
vote
1answer
81 views

syslog-ng difference between “not message(something)” and “not match(something)”?

What is the difference between these two?: filter f_avc { not message(something); }; and: filter f_avc { not match(something); }; it's hard to google for these types of questions :D
3
votes
1answer
442 views

Rsyslog Central Log Host

I'm moving from a syslog-ng central log host to rsyslog. I can't even seem to find syslog-ng in the CentOS repos these days. I want to filter logs by hostname and facility. Here is how I do it in ...
4
votes
3answers
2k views

How to exclude given lines in syslog-ng?

I need to exclude a given line in the messages file: Oct 25 04:09:23 SERVERNAME PFILTER-DROP: IN=ifeth4 OUT= MAC=ff:ff:ff:ff:ff:ff:AA:AA:AA:AA:AA:AA:AA:AA SRC=192.168.202.4 DST=192.168.202.255 ...
2
votes
1answer
352 views

Configure & Compile syslog-ng from source, got: Threads are not supported on this platform

I have configure, gmake, and gmake installed syslog-ng-3.4.0alpha1 with eventlog-0.2.12 and other dependencies. From then output of the ./configure --prefix=/syslog --with-gnu-ld, I can see that the ...
2
votes
1answer
2k views

Starting syslog-ng

I've recently installed syslog-ng but am confused about how to start it (on Fedora). I do: /etc/init.d/syslog-ng start which reports that it's started ok. However, it doesn't actually do anything ...
4
votes
1answer
6k views

Converting syslog-ng 3.0? format to 3.2 format

Just rebooted my system to this warning :: Starting Syslog-NG [BUSY] WARNING: Configuration file format is too old, please update ...
2
votes
2answers
215 views

Can I send the ouput of a log to a command as an argument to an option in syslog-ng?

According to the documentation I can execute a program somewhat like so: destination knotifier { program('/path/to/executable'; }; And it will send the log to the stdin of the executable. But what ...