Dear All

This is reg. Syslog server, We are using GFI events manager to collect all the logs from various devices like

win2k3 server, Linux Server, L2 & L3 switches, Routers and firewalls. I am able to capture the Linux server logs means kernal, .info etc in

My GFI application. But how do I specifically capture squid, FTP server ( linux server is acting as Proxy and FTP) in My GFI application.

to capture the basic logs from linux server i modified /etc/syslog.conf and made entry like

*.* @ my GFI application server IP

Is there any way to do that. Kindly help.

Regards
Sakthi

If you want the events to go to syslog, you'll have to modify your syslog.conf file to capture those events, or modify your application config to send the events to syslog.

Since you're doing a blanket capture (*.*), modify your squid/ftp configs to send syslog events, of whatever level you'd like.

How do re-direct logs of squid & FTP to syslog server? Kindly help

You need to read the configuration documentation for Squid and whatever FTP server you're using, and do what they tell you.

Can someone tell me how to do it exactly, For squid i have added the below said line in squid.conf

access_log syslog

then i restarted both the syslog and squid. But nothing seems to be capturing. Even I want help for FTP logs into Syslog. Kindly help.

You don't say what FTP server you're using. And you don't say what version of Squid you're using. Your question is very broad, so I doubt someone could tell you "how to do it exactly".

Squid documentation can be found here
http://www.squid-cache.org/

Depending on what level of events you're capturing, the logs might not show anything. If Squid is only going to send critical errors to Syslog, and you're not having any, then you won't GET anything, even though all is working as it should be.

There are lots of FTP servers for Linux (wuFTP, ProFTPD, vsFTP, etc.). You don't say what you're using, so there's no guidance anyone can give you.

My Squid version is squid/2.5/STABLE6. I want to capture access log of squid.

My FTP Server is vsftpd - I want to capture access log of FTP

I hope this info will help

I

Come on - anyone using squid to setup a proxy service, or setup an FTP service can read a man page.

man vsftpd.conf, search syslog and you will find your vsftpd.conf parameter.

I agree totally...just saying "fix my problem" without doing anything on your side is a bit much to ask.

Go through the config options (you have FULL documentation sets for Squid and VSFTPD), and do what they say. If you still have problems, you need to show the error message(s) you're getting, and what you've done to try to fix them.

A hand up is different from a hand out.