- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - Linux
- >
- Making log server
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-17-2003 07:51 PM
06-17-2003 07:51 PM
Can I make log server which all client messages are logged separately
One condition is given
1.
Messeges from all clients must be logged by client's name each at log server
any tips are helpful
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-17-2003 08:12 PM
06-17-2003 08:12 PM
Re: Making log server
So you've got your client PC's logging events like:
kern.* @othermachine
(as detailed in 'man syslog.conf').
You'll also have to make 'syslogd' listen for incoming requests. According to 'man syslogd', the flag you need is '-r'.
Depending on what distribution you are using depends on how to best eanble this feature however.
The simplest way is to modify the startup routine in /etc/rc.d/*/*syslogd (adding the -r flag to the startup routines), however if you are using a RedHat system, you can just modify the line "SYSLOGD_OPTIONS" in "/etc/sysconfig/syslog".
Have fun.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-17-2003 09:18 PM
06-17-2003 09:18 PM
SolutionI found syslog-ng is the right candidate for this purporse when I was experimenting on distributed IDS architectures and centralized logging system.
syslog-ng is capable of filtering the incoming syslog data from the syslog clients and decide the destination file depending on the client hostname.
I have some example on it's filtering configuration on syslog-ng central log server,
filter f_client1{ host("client1"); };
filter f_client2 { host("client2"); };
destination client1 { file /var/log/client1; };
destination client2 { file /var/log/client2; };
now the syslog messages from client1 will logged to /var/log/client1 and client2 will be logged to /var/log/client2
regards,
U.SivaKumar
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-18-2003 01:24 AM
06-18-2003 01:24 AM
Re: Making log server
can you give more details about?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-18-2003 03:31 AM
06-18-2003 03:31 AM
Re: Making log server
http://www.balabit.com/products/syslog_ng/reference/book1.html
http://www.campin.net/syslog-ng/faq.html
you can download the free software GPL licensed here
http://www.balabit.com/downloads/syslog-ng/
regards,
U.SivaKumar
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2003 12:30 AM
06-19-2003 12:30 AM
Re: Making log server
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2003 02:30 AM
06-19-2003 02:30 AM
Re: Making log server
Only the central log server which you choose should have syslog-ng installed. Disable normal syslogd in this server.
#ntsysv
syslog-ng should be listening for incoming syslog messages.
regards,
U.SivaKumar
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2003 02:31 AM
06-19-2003 02:31 AM
Re: Making log server
Only the central log server which you choose should have syslog-ng installed. Disable normal syslogd in this server.
#ntsysv
syslog-ng should be listening for incoming syslog messages.
On all other client edit /etc/syslogd.conf and put this single line if you want to log everything to the central log server.
*.* @log.mydomain.com
regards,
U.SivaKumar
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2003 01:24 PM
06-19-2003 01:24 PM
Re: Making log server
http://coombs.anu.edu.au/~avalon/nsyslog.html
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2003 06:10 PM
06-19-2003 06:10 PM
Re: Making log server
see that attached file
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2003 12:03 AM
06-20-2003 12:03 AM
Re: Making log server
what's wrong?
Messeges from all clients are logging default messages file.
what's wrong?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2003 07:09 PM
06-20-2003 07:09 PM
Re: Making log server
Thanks..
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2003 07:47 PM
06-20-2003 07:47 PM
Re: Making log server
is your problem solved ?.
regards,
U.SivaKumar