debian sarge stable as syslog server

cccc · 06-16-2006, 07:40 AM

hi

I'd like to configure debian sarge stable as syslog server for the spam appliance.
in /etc/syslog.conf I have the following entry:

Code:

local7.*           -/var/log/spam/messages

I changed in /etc/init.d/sysklogd from:

Code:

SYSLOGD=""

to:

Code:

SYSLOGD="-r"

I've restarted the sysklod, but still doesn't work !

udp port 514 should be open:

Code:

#  netstat -a | grep syslog
udp        0      0 *:syslog                *:*
# netstat -an | grep 514
udp        0      0 0.0.0.0:514             0.0.0.0:*

sridhar11 · 06-18-2006, 12:22 PM

have look here for syslog server with syslog-ng

cccc · 07-10-2006, 05:00 AM

still cannot find any solution for this problem !

I've tried to open this webseite, but I get this message:

Page Not Found

cccc · 07-10-2006, 11:18 AM

I've deinstalled sysklogd and installed syslog-ng, but I don't know howto configure syslog-ng.conf to get log files in /var/log/spam/messages from the remote machine.

sridhar11 · 07-11-2006, 02:59 AM

did you read my previous post in that i have provided one link this is the best link you can get how to configure your syslog-ng.conf

unSpawn · 07-11-2006, 03:40 AM

Stupid question probably, but does the remote machine know where to send it's syslog messages of a certain facility/level to? And you're right, sridhar11's Syslog-ng link doesn't work (one char), it's http://www.debianhelp.co.uk/syslog-ng.htm.

I don't like the "here, try product X" type of answer that doesn't reason why product X is better. I would suggest using Syslog and see if you can get that working and switch to Syslog-ng if you feel you need features Syslog doesn't offer.

cccc · 07-11-2006, 07:08 AM

it works now !

I had to open the udp port 514 at the hardware firewall.

anyway thanks to ALL.

greetings
cccc

sridhar11 · 07-12-2006, 06:55 AM

thanks for point that and now i have modified the link