I need help configuring a syslog server on a xen virtual machine

sezam2 · 02-12-2009, 08:20 AM

Hello

i am supposed to configure a syslog server ona xen virtuel machine in wich suse 10 sp2 is installed

the problem

1 i dont know who to locate the file( in the host supposed to send log to my server)

so i introduce the ipp adress of my server

2 What change have i to introduce içni the server to locate the destination of thees logs

thks

niknah · 02-12-2009, 09:19 PM

/etc/syslog-ng/syslog-ng.conf

or if you only have normal syslog it's /etc/syslog.conf

chitambira · 02-19-2009, 03:31 AM

in apache config put;
ErrorLog syslog:local1
then in /etc/syslog.conf put;
local1.* @your_syslog_server

sezam2 · 02-19-2009, 05:41 PM

Quote:

Originally Posted by chitambira

in apache config put;
ErrorLog syslog:local1
then in /etc/syslog.conf put;
local1.* @your_syslog_server

i dit that but i sow in

tail -f /var/log/allmesssages

nothing
1 this solution needs more steps to work

2 i dont no tknow were to find this sent log

because i added the -r option to my syslog.conf file

i added

udp(port"514");

in
/ect/syslog-ng/syslog-ng.conf

it work for other log not for this one

chitambira · 02-20-2009, 07:59 AM

mmm.... let me see relevant sections of both your syslog-ng.conf and apache.conf

sezam2 · 02-21-2009, 05:50 PM

Quote:

Originally Posted by chitambira

mmm.... let me see relevant sections of both your syslog-ng.conf and apache.conf

for syslog

Code:

.
.
.
local1.*                      @192.168.1.66

.
.
.

note that when it was

local0,local1.* -/var/log/localmessages
it was working

each time i restart apache i see some worning
tail -f /var/log/localmessages

2) concerning mod_log_config.conf

at the end i added

Code:

ErrorLog syslog:local1

remember my syslog server deals with external log like this

Code:

.
.
.

 udp(port(514));
.
.
.

destination std {
        file ("/var/log/HOSTS/$YEAR-$MONTH/$HOST/$FACILITY-$YEAR-$MONTH-$DAY"
                owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes)
        );
};
log {
        source(src);
        destination(std);
};

i don't if it is working i should see somthing here

tail -f /var/log/HOSTS/date/name_of_the_host/facility/

if i am looking in the wrong place please tell me

sezam2 · 02-21-2009, 06:00 PM

sorry i think

i got it

i have seen in

my syslog server local messages and i so warninigs each time i rtestart apache in the client
is it the write way ?

thanks

sezam2 · 02-21-2009, 06:00 PM

sorry i think

i got it

i have seen in

my syslog server local messages and i so warninigs each time i rtestart apache in the client
is it the write way ?

thanks