Re: [Nolug] SYSLOG Recommendation?

On Thu, 28 Apr 2005, Joey Kelly wrote:

>> Has anyone seen such an animal?
>
> I haven't done it, but syslog on *nix is able to receive log info from other
> machines. Once there, you ought to be able to parse for each host.

Yes, but the problem is it dumps everything from every host/device (for a
facility.priority) to the same log file. Parsing that file for each host
is what's a pain... it'd be nice if that was built into syslog.

I believe syslog-ng has that functionality but i have not used it before.
http://freshmeat.net/projects/syslog-ng/

Here's a config snippet i saw on the mini-howto that seems to do what
Charles wants:

   destination hosts {
    file("/var/log/HOSTS/$HOST/$YEAR/$MONTH/$DAY/$FACILITY$YEAR$MONTH$DAY"
    owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes));
   };

   log {
         source(src);
         destination(hosts);
   };

ray

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Ray DeJean  				       	 http://www.r-a-y.org
Systems Engineer                    Southeastern Louisiana University
IBM Certified Specialist  	      AIX Administration, AIX Support
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
___________________
Nolug mailing list
nolug@nolug.org