LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 07-17-2008, 04:32 AM   #1
sakthi.s
Member
 
Registered: Nov 2006
Posts: 42

Rep: Reputation: 15
Squid and FTP logs to Centralised Log server


Dear All

This is reg. Syslog server, We are using GFI events manager to collect all the logs from various devices like

win2k3 server, Linux Server, L2 & L3 switches, Routers and firewalls. I am able to capture the Linux server logs means kernal, .info etc in

My GFI application. But how do I specifically capture squid, FTP server ( linux server is acting as Proxy and FTP) in My GFI application.

to capture the basic logs from linux server i modified /etc/syslog.conf and made entry like

*.* @ my GFI application server IP

Is there any way to do that. Kindly help.

Regards
Sakthi
 
Old 07-17-2008, 08:45 AM   #2
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 14,759

Rep: Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612
Quote:
Originally Posted by sakthi.s View Post
Dear All

This is reg. Syslog server, We are using GFI events manager to collect all the logs from various devices like win2k3 server, Linux Server, L2 & L3 switches, Routers and firewalls. I am able to capture the Linux server logs means kernal, .info etc in My GFI application. But how do I specifically capture squid, FTP server ( linux server is acting as Proxy and FTP) in My GFI application. to capture the basic logs from linux server i modified /etc/syslog.conf and made entry like

*.* @ my GFI application server IP
If you want the events to go to syslog, you'll have to modify your syslog.conf file to capture those events, or modify your application config to send the events to syslog.

Since you're doing a blanket capture (*.*), modify your squid/ftp configs to send syslog events, of whatever level you'd like.
 
Old 07-18-2008, 07:06 AM   #3
sakthi.s
Member
 
Registered: Nov 2006
Posts: 42

Original Poster
Rep: Reputation: 15
How do re-direct logs of squid & FTP to syslog server? Kindly help
 
Old 07-18-2008, 08:57 AM   #4
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 14,759

Rep: Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612
Quote:
Originally Posted by sakthi.s View Post
How do re-direct logs of squid & FTP to syslog server? Kindly help
You need to read the configuration documentation for Squid and whatever FTP server you're using, and do what they tell you.
 
Old 07-19-2008, 02:09 AM   #5
sakthi.s
Member
 
Registered: Nov 2006
Posts: 42

Original Poster
Rep: Reputation: 15
Can someone tell me how to do it exactly, For squid i have added the below said line in squid.conf

access_log syslog

then i restarted both the syslog and squid. But nothing seems to be capturing. Even I want help for FTP logs into Syslog. Kindly help.
 
Old 07-20-2008, 12:53 PM   #6
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 14,759

Rep: Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612
Quote:
Originally Posted by sakthi.s View Post
Can someone tell me how to do it exactly, For squid i have added the below said line in squid.conf

access_log syslog

then i restarted both the syslog and squid. But nothing seems to be capturing. Even I want help for FTP logs into Syslog. Kindly help.
You don't say what FTP server you're using. And you don't say what version of Squid you're using. Your question is very broad, so I doubt someone could tell you "how to do it exactly".

Squid documentation can be found here
http://www.squid-cache.org/

Depending on what level of events you're capturing, the logs might not show anything. If Squid is only going to send critical errors to Syslog, and you're not having any, then you won't GET anything, even though all is working as it should be.

There are lots of FTP servers for Linux (wuFTP, ProFTPD, vsFTP, etc.). You don't say what you're using, so there's no guidance anyone can give you.
 
Old 07-22-2008, 11:49 PM   #7
sakthi.s
Member
 
Registered: Nov 2006
Posts: 42

Original Poster
Rep: Reputation: 15
Re:

My Squid version is squid/2.5/STABLE6. I want to capture access log of squid.

My FTP Server is vsftpd - I want to capture access log of FTP

I hope this info will help

I
 
Old 07-23-2008, 12:03 AM   #8
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 59
Come on - anyone using squid to setup a proxy service, or setup an FTP service can read a man page.

man vsftpd.conf, search syslog and you will find your vsftpd.conf parameter.
 
Old 07-23-2008, 08:57 AM   #9
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 14,759

Rep: Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612Reputation: 2612
Quote:
Originally Posted by Mr. C. View Post
Come on - anyone using squid to setup a proxy service, or setup an FTP service can read a man page.

man vsftpd.conf, search syslog and you will find your vsftpd.conf parameter.
I agree totally...just saying "fix my problem" without doing anything on your side is a bit much to ask.

Go through the config options (you have FULL documentation sets for Squid and VSFTPD), and do what they say. If you still have problems, you need to show the error message(s) you're getting, and what you've done to try to fix them.

A hand up is different from a hand out.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid log FTP? nkutty Linux - Server 1 08-21-2006 01:36 AM
Opennms Logs - where are web.log, web_rtc.log and webauth.log referenced? not_much_of_a_guru Linux - Networking 0 07-12-2006 10:28 AM
Help me regain control of my server logs! (squid logging) Avatar Linux - Security 8 11-03-2005 07:54 PM
ftp server - Pure ftp - logs in OK but no files visible tp11235 Linux - Networking 2 08-30-2005 05:11 AM


All times are GMT -5. The time now is 05:30 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration