RE: [Nolug] SYSLOG Recommendation?

From: John Souvestre <johns_at_sstar.com>
Date: Thu, 28 Apr 2005 17:44:48 -0500
Message-ID: <024e01c54c43$e21194d0$6401a8c0@JohnS>

Hi Ray.

The one which comes with FreeBSD allows you to specify what you want to go
into each log. Thus you can set up a log per device, plus have a log of high
priority items regardless of device, etc...

John

    John Souvestre - Southern Star - (504) 888-3348 - www.sstar.com

-----Original Message-----
From: owner-nolug@nolug.org [mailto:owner-nolug@nolug.org] On Behalf Of -ray
Sent: Thursday, April 28, 2005 5:14 PM
To: nolug@nolug.org
Subject: Re: [Nolug] SYSLOG Recommendation?

On Thu, 28 Apr 2005, Joey Kelly wrote:

>> Has anyone seen such an animal?
>
> I haven't done it, but syslog on *nix is able to receive log info from other
> machines. Once there, you ought to be able to parse for each host.

Yes, but the problem is it dumps everything from every host/device (for a
facility.priority) to the same log file. Parsing that file for each host
is what's a pain... it'd be nice if that was built into syslog.

I believe syslog-ng has that functionality but i have not used it before.
http://freshmeat.net/projects/syslog-ng/

Here's a config snippet i saw on the mini-howto that seems to do what
Charles wants:

   destination hosts {
    file("/var/log/HOSTS/$HOST/$YEAR/$MONTH/$DAY/$FACILITY$YEAR$MONTH$DAY"
    owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes));
   };

   log {
         source(src);
         destination(hosts);
   };

ray

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Ray DeJean  				       	 http://www.r-a-y.org
Systems Engineer                    Southeastern Louisiana University
IBM Certified Specialist  	      AIX Administration, AIX Support
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
___________________
Nolug mailing list
nolug@nolug.org
___________________
Nolug mailing list
nolug@nolug.org
Received on 04/28/05

This archive was generated by hypermail 2.2.0 : 12/19/08 EST