LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 10-11-2011, 12:49 PM   #1
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Rep: Reputation: Disabled
Question I can send syslog log to rsyslog server? how?


Hi,

I already configured to send log through rsyslog to another rsyslog, using logger (Ex: ErrorLog "|/usr/bin/logger -t httpd -p local7.err"
). And I don't have any problem.

1) But I need to know, if I can without install rsyslog, I mean through syslog to send some log to the server with have rsyslog previously configure. If is possible, how?

2) If is possible without using |/usr/bin/logger? because logger changes the log and I can't read (some app read that log, and then I need to modify all the regular expression).

I already test send some log through syslog to rsyslog, but without luck.

Additional information: I used httpd log

Thank for the help.

John
 
Old 10-11-2011, 02:22 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,458
Blog Entries: 54

Rep: Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897
Quote:
Originally Posted by JohnV2 View Post
I already configured to send log through rsyslog to another rsyslog, using logger (..) If is possible without using |/usr/bin/logger? (..) I already test send some log through syslog to rsyslog, but without luck.
Syslog can not read files itself but Rsyslog can, so you do not need to pipe through 'logger'. Here is an example:
Code:
$InputFileName /path/to/process.log
$InputFileTag tagname
$InputFileStateFile processname.state
$InputFileSeverity info
$InputFileFacility local1
$InputRunFileMonitor
 
1 members found this post helpful.
Old 10-11-2011, 06:09 PM   #3
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Original Poster
Rep: Reputation: Disabled
Hi,

Thanks for the replay, Ok, but hmmm I think I don't follow you... some application uses syslog:localX in the config file but other use or "I believe that use" |/usr/bin/logger like this example (httpd.conf), because is no other way:
Quote:
CustomLog "|/usr/bin/logger -t httpd -p local6.info" combined
so, where I use this, in rsyslog righ?:
Quote:
$InputFileName /path/to/process.log
$InputFileTag tagname
$InputFileStateFile processname.state
$InputFileSeverity info
$InputFileFacility local1
$InputRunFileMonitor
I configure this you give and then I send to the other server, righ? I ask for to be sure because I'm not working right now.

John.
 
Old 10-11-2011, 06:50 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,458
Blog Entries: 54

Rep: Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897
Quote:
Originally Posted by JohnV2 View Post
because is no other way
You mean you can't use a CustomLog directove without directing output straight to file which rsyslog then can read?..


Quote:
Originally Posted by JohnV2 View Post
so, where I use this, in rsyslog righ?:
Yes.


Quote:
Originally Posted by JohnV2 View Post
I configure this you give and then I send to the other server, righ?
Yes. File gets read by rsyslog directly. Rsyslog then sends to remote rsyslog.
 
Old 10-11-2011, 08:29 PM   #5
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Original Poster
Rep: Reputation: Disabled
Wink

Quote:
Originally Posted by unSpawn View Post
You mean you can't use a CustomLog directove without directing output straight to file which rsyslog then can read?..
Sorry about that I was a little distracted, I know what you mean. Thanks unSpawn is very useful... Question 2 Done!


John
 
Old 10-12-2011, 11:39 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,458
Blog Entries: 54

Rep: Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897Reputation: 2897
Please mark your thread "solved" then.
 
Old 10-13-2011, 08:55 AM   #7
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by unSpawn View Post
Please mark your thread "solved" then.
Yes, thanks... sorry I was busy yesterday... I ask here about the other questions (the firts one): link

Thanks unSpawn.

John
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] syslog remote logging with rsyslog server Chenchu Linux - Newbie 3 09-17-2011 01:34 PM
support of third party tools logs in syslog/rsyslog Raheel Hassan Linux - Security 2 08-23-2010 10:30 AM
how to write log data to disk when the server is down while using rsyslog prakash.akumalla Linux - Newbie 1 06-25-2008 01:15 AM
*realtime* syslog monitoring/alerting with Rsyslog? TotalDefiance Linux - Software 3 11-01-2005 10:23 AM
WLAN Card with TI acx100 chipset send too much log entries into syslog scope5 Linux - Wireless Networking 0 06-07-2004 02:38 PM


All times are GMT -5. The time now is 12:54 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration