LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Reply
 
Search this Thread
Old 10-11-2011, 05:04 PM   #1
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Rep: Reputation: Disabled
Red face Send syslog log to rsyslog server? is possible?


Hello,

I have a server with debian and rsyslog and I have another server with slackware and syslog.

I saw slackware don't have rsyslog neither on slackbuilds (why?). So how I can send log from syslog (slackware) to a rsyslog (debian)? I did some tests, but were not satisfactory.

Previously I configure two another server (with other distros) with rsyslog both, and I can send log through both.

Thanks.

John
 
Old 10-11-2011, 05:17 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,397

Rep: Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963
sure, you just use "@ip.of.ser.ver" instead of a file name in syslog.conf. This will send by UDP to the remote host.

http://linux.about.com/od/commands/l...l8_syslogd.htm

not that there should be no such thing as interoperability between different syslog server types. they both speak syslog therefore you can send data from one to another using a common standard.
 
Old 10-11-2011, 05:35 PM   #3
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Original Poster
Rep: Reputation: Disabled
Hi acid,

Hey thanks for the reply, I already do that. But I don't know why do not receive any log in rsyslog (debian). Check this:

Quote:
slackware /etc/syslog.conf
local0.* @@192.168.0.150:514
Quote:
debian /etc/rsyslog.conf
if $syslogfacility-text == 'local0'and $programname == 'postgres' then /var/log/postgresql
I use this because another process use local0.

Quote:
debian /etc/rsyslog.conf
# provides UDP syslog reception
$ModLoad imudp
$UDPServerRun 514

# provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514

Note: @@TCP and @UDP (already test both and nothing)

John

Last edited by JohnV2; 10-11-2011 at 05:37 PM.
 
Old 10-11-2011, 07:59 PM   #4
Richard Cranium
Senior Member
 
Registered: Apr 2009
Location: Carrollton, Texas
Distribution: Slackware64 14.1
Posts: 1,494

Rep: Reputation: 437Reputation: 437Reputation: 437Reputation: 437Reputation: 437
Quote:
Originally Posted by JohnV2 View Post
Hi acid,

Hey thanks for the reply, I already do that. But I don't know why do not receive any log in rsyslog (debian).
Well, I'd guess that your syntax is wrong.

Code:
local0.* @@192.168.0.150:514
isn't correct.

Code:
local0.* @192.168.0.150
is, assuming there is a tab between "*" and "@".

You should read the man page that's on the slackware box when you are configuring the slackware syslog.conf.

You should also ensure that rsyslogd on the debian box is listening on 192.168.0.150:514.
 
1 members found this post helpful.
Old 10-11-2011, 08:56 PM   #5
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by Richard Cranium View Post
Well, I'd guess that your syntax is wrong.

Code:
local0.* @@192.168.0.150:514
isn't correct.

Code:
local0.* @192.168.0.150
Oh thanks Richard, I always configure rsyslog with @@192.168.0.150:514 (using TCP and the port) because of that, I used the same syntax in the syslog.conf. I already tested with @@ and @ but always using the port (@192.168.0.150:514).

I'll check that later, I'm not at work right now, thanks again...


John
 
Old 10-13-2011, 09:10 AM   #6
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Original Poster
Rep: Reputation: Disabled
Solved

It's works Richard... thanks both of you Richard and Acid

In conclusion, Syslog can send log to rsyslog, using the follow syntax:

Quote:
local0.* @192.168.0.150
Not
Quote:
local0.* @192.168.0.150:port
I don't tested if I can use @@TCP with syslog just test the @UDP.

John
 
Old 10-13-2011, 09:46 AM   #7
Richard Cranium
Senior Member
 
Registered: Apr 2009
Location: Carrollton, Texas
Distribution: Slackware64 14.1
Posts: 1,494

Rep: Reputation: 437Reputation: 437Reputation: 437Reputation: 437Reputation: 437
Quote:
Originally Posted by JohnV2 View Post
It's works Richard... thanks both of you Richard and Acid

In conclusion, Syslog can send log to rsyslog, using the follow syntax:

Not

I don't tested if I can use @@TCP with syslog just test the @UDP.

John
The version of syslogd with Slackware doesn't support TCP.
 
Old 10-13-2011, 10:20 AM   #8
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Original Poster
Rep: Reputation: Disabled
Wink

Quote:
Originally Posted by Richard Cranium View Post
The version of syslogd with Slackware doesn't support TCP.
Aff is good to know.... I was kinda busy yesterday to do the test again. Thanks men...

best regards,
John
 
Old 10-13-2011, 11:08 AM   #9
ponce
Senior Member
 
Registered: Aug 2004
Location: Pisa, Italy
Distribution: Slackware
Posts: 2,447

Rep: Reputation: 875Reputation: 875Reputation: 875Reputation: 875Reputation: 875Reputation: 875Reputation: 875
sorry, I spotted this only now.

I actually had some testing with rsyslog on slackware and it seems to work pretty fine, if you want to try it you can find the latest build script here

http://cgit.ponce.cc/slackbuilds/pla...log/?h=rsyslog

http://github.com/Ponce/slackbuilds/...ystem/rsyslog/

Last edited by ponce; 10-13-2011 at 01:14 PM.
 
Old 10-13-2011, 01:37 PM   #10
JohnV2
Member
 
Registered: Oct 2011
Distribution: Slackware
Posts: 66

Original Poster
Rep: Reputation: Disabled
Wink

Quote:
Originally Posted by ponce View Post
sorry, I spotted this only now.

I actually had some testing with rsyslog on slackware and it seems to work pretty fine, if you want to try it you can find the latest build script here

http://cgit.ponce.cc/slackbuilds/pla...log/?h=rsyslog

http://github.com/Ponce/slackbuilds/...ystem/rsyslog/
Ciao ponce!

Yeah I saw you link a couple of days when I was searching for a slackbuild of rsyslog, nice! I tested in my PC. But I decided to use the syslog what come with slackware, for stability purpose, you know, because is for a client. And mostly because the server with slackware is of the client. But the next time I'll use you slackbuild, I need to be sure first.

thanks,

John
 
  


Reply

Tags
debian, rsyslog, slackware, syslog


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] I can send syslog log to rsyslog server? how? JohnV2 Linux - Server 6 10-13-2011 08:55 AM
[SOLVED] syslog remote logging with rsyslog server Chenchu Linux - Newbie 3 09-17-2011 01:34 PM
how to write log data to disk when the server is down while using rsyslog prakash.akumalla Linux - Newbie 1 06-25-2008 01:15 AM
*realtime* syslog monitoring/alerting with Rsyslog? TotalDefiance Linux - Software 3 11-01-2005 10:23 AM
WLAN Card with TI acx100 chipset send too much log entries into syslog scope5 Linux - Wireless Networking 0 06-07-2004 02:38 PM


All times are GMT -5. The time now is 07:00 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration