LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 01-25-2012, 03:22 AM   #1
ganesh24pal@gmail.com
Member
 
Registered: Jun 2010
Location: Mumbai, India
Distribution: CentOS , Fedora, Open Suse
Posts: 193
Blog Entries: 5

Rep: Reputation: 3
Question How to setup SYSLOG server


Hi,

I have CentOS 5.6 installed in Server.My Network Team has asked me to install SYSLOG server for Fortiget Firewalls log.

Please suggest me.
 
Old 01-25-2012, 03:32 AM   #2
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297
Hello,

Your first starting point when looking for howtos and guides is the internet. If you ask Google you'll get the following list:
Google is your friend!

Another option you might look at and which has far more possibilities is syslog-ng (links to documentation here).

EDIT: Another link, just published today: http://www.thegeekstuff.com/2012/01/...ing/#more-9477

Kind regards,

Eric

Last edited by EricTRA; 01-25-2012 at 03:37 AM.
 
1 members found this post helpful.
Old 01-26-2012, 12:13 PM   #3
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by ganesh24pal@gmail.com View Post
Hi,
I have CentOS 5.6 installed in Server.My Network Team has asked me to install SYSLOG server for Fortiget Firewalls log.
Please suggest me.
Well, if you're running Linux, you already HAVE a syslog server. So, I'd suggest you just point your firewall logs to your CentOS server...that's it.

If you're looking for more granularity, install syslog-ng, and split the firewall logs to a separate file.
 
Old 01-28-2012, 05:53 AM   #4
ganesh24pal@gmail.com
Member
 
Registered: Jun 2010
Location: Mumbai, India
Distribution: CentOS , Fedora, Open Suse
Posts: 193

Original Poster
Blog Entries: 5

Rep: Reputation: 3
Quote:
Originally Posted by TB0ne View Post
Well, if you're running Linux, you already HAVE a syslog server. So, I'd suggest you just point your firewall logs to your CentOS server...that's it.

If you're looking for more granularity, install syslog-ng, and split the firewall logs to a separate file.
Tbone,

I configured Syslogs server .
1) From client linux System i am getting logs, but from firewall no threate is comming.
2) My self googling but no help .
3) Now i am going for sylog-ng.

Thanks.
 
Old 01-28-2012, 11:33 AM   #5
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by ganesh24pal@gmail.com View Post
Tbone,
I configured Syslogs server .
No you didn't. It came already installed with CentOS
Quote:
1) From client linux System i am getting logs, but from firewall no threate is comming.
Did you check your firewall settings?? Is your Linux system allowing incoming connections from those addresses? Are you SURE your firewall is sending those events, since there are many levels of information syslogs can send? Do you have the firewall configured to SEND to the Linux box? Can you see any traffic between the two servers using Wireshark, or another sniffer?
Quote:
2) My self googling but no help.
3) Now i am going for sylog-ng.
...and unless you have traffic between the two boxes, allow incoming connections to the Linux box from the firewall device(s), or configure the firewall device(s) to SEND syslog events to a remote syslog server, it won't matter WHAT syslog engine you're running.
 
Old 01-29-2012, 10:08 AM   #6
ganesh24pal@gmail.com
Member
 
Registered: Jun 2010
Location: Mumbai, India
Distribution: CentOS , Fedora, Open Suse
Posts: 193

Original Poster
Blog Entries: 5

Rep: Reputation: 3
Post

I am getting error while installing Syslog-ng.

rpm -i syslog-ng-2.0.3-1.el5.kb.i386.rpm
warning: syslog-ng-2.0.3-1.el5.kb.i386.rpm: Header V3 DSA signature: NOKEY, key ID 3e13cf5b
error: Failed dependencies:
libevtlog.so.0 is needed by syslog-ng-2.0.3-1.el5.kb.i386
 
Old 01-29-2012, 10:22 AM   #7
klearview
Member
 
Registered: Aug 2006
Location: London
Distribution: Debian, Kubuntu
Posts: 572

Rep: Reputation: 75
As the error says - you have a missing dependency.

Install libevtlog0.
 
Old 01-29-2012, 10:26 AM   #8
klearview
Member
 
Registered: Aug 2006
Location: London
Distribution: Debian, Kubuntu
Posts: 572

Rep: Reputation: 75
And by the way, why are you complicating your life? CentOS 5 has rsyslog in repos - why don't you just use supported rsyslog rather than hunting for unsupported syslog-ng's dependencies?

Last edited by klearview; 01-29-2012 at 10:27 AM. Reason: grammar
 
Old 01-29-2012, 03:50 PM   #9
pantdk
Member
 
Registered: Oct 2011
Location: New Delhi
Posts: 248
Blog Entries: 3

Rep: Reputation: 17
Hi All

used these rpm & configure you syslog-ng server without any error it's fully tested in rhel5 & centos5
rpm can used as per os architecture 64bit or 32bit
When i made syslog server
#yum groupinstall "Development Tools"
# rpm -ivh syslog-ng-3.1.2-1.rhel5.i386.rpm

or may be these can required
#yum groupinstall "Development Libraries"
# yum install lib* glib* pcre-devel
 
Old 01-29-2012, 04:54 PM   #10
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by pantdk View Post
Hi All

used these rpm & configure you syslog-ng server without any error it's fully tested in rhel5 & centos5
rpm can used as per os architecture 64bit or 32bit
When i made syslog server
#yum groupinstall "Development Tools"
# rpm -ivh syslog-ng-3.1.2-1.rhel5.i386.rpm

or may be these can required
#yum groupinstall "Development Libraries"
# yum install lib* glib* pcre-devel
Uhh...why??

Just typing in "yum install syslog-ng" will get the dependencies it needs.
 
Old 01-29-2012, 05:03 PM   #11
klearview
Member
 
Registered: Aug 2006
Location: London
Distribution: Debian, Kubuntu
Posts: 572

Rep: Reputation: 75
Quote:
Originally Posted by TB0ne View Post
Uhh...why??

Just typing in "yum install syslog-ng" will get the dependencies it needs.
syslog-ng is not in CentOS repos. He would need to add a repository that contains it (EPEL maybe?). Rsyslog is supported in CentOS 5 so why not just use it.
 
Old 01-29-2012, 05:45 PM   #12
pantdk
Member
 
Registered: Oct 2011
Location: New Delhi
Posts: 248
Blog Entries: 3

Rep: Reputation: 17
Hi TB0ne,

it is a open-source pkg for making a log server which required some addition pkg

in syslog-ng required some addition rpm in my case i also see these problem #yum groupinstall "Development Tools" have resolve dependency error.

Syslog-ng 2.0 is totally different from syslog-ng 3.0 as per pkg & configuration so Development tool or "Development Libraries" may required when i tested in 2.0 it shown me some pkg error which resolve through #yum groupinstall "Development Tools" & also same done in 3.0

Last edited by pantdk; 01-29-2012 at 06:18 PM.
 
Old 01-29-2012, 06:11 PM   #13
ganesh24pal@gmail.com
Member
 
Registered: Jun 2010
Location: Mumbai, India
Distribution: CentOS , Fedora, Open Suse
Posts: 193

Original Poster
Blog Entries: 5

Rep: Reputation: 3
Quote:
Originally Posted by klearview View Post
And by the way, why are you complicating your life? CentOS 5 has rsyslog in repos - why don't you just use supported rsyslog rather than hunting for unsupported syslog-ng's dependencies?
HI Klearview,

I am install rsylog server , but unable to configure as server.
 
Old 01-30-2012, 05:37 AM   #14
Reuti
Senior Member
 
Registered: Dec 2004
Location: Marburg, Germany
Distribution: openSUSE 15.2
Posts: 1,339

Rep: Reputation: 260Reputation: 260Reputation: 260
Quote:
Originally Posted by klearview View Post
syslog-ng is not in CentOS repos. He would need to add a repository that contains it (EPEL maybe?). Rsyslog is supported in CentOS 5 so why not just use it.
Which syslog daemon you prefer might be a matter of taste (and I like syslog-ng). But instead of relying on an RPM being available somewhere, I find it easier to compile it on my own in case I need a newer/different version.

@ganesh24pal: what do you mean by “... configure as server.” You want to setup remote logging?
 
1 members found this post helpful.
Old 01-31-2012, 12:36 AM   #15
ganesh24pal@gmail.com
Member
 
Registered: Jun 2010
Location: Mumbai, India
Distribution: CentOS , Fedora, Open Suse
Posts: 193

Original Poster
Blog Entries: 5

Rep: Reputation: 3
Quote:
Originally Posted by Reuti View Post
Which syslog daemon you prefer might be a matter of taste (and I like syslog-ng). But instead of relying on an RPM being available somewhere, I find it easier to compile it on my own in case I need a newer/different version.

@ganesh24pal: what do you mean by “... configure as server.” You want to setup remote logging?
@reuti yes i want to how configure remote logging server via rsyslog.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
syslog server setup myubuntu Linux - Newbie 4 04-05-2010 12:49 AM
Syslog Server Setup - Fetch info from Router bence8810 Linux - Server 2 07-12-2007 09:33 AM
LXer: Centralized Syslog Server Using syslog-NG LXer Syndicated Linux News 0 04-28-2006 06:21 PM
How to setup a syslog server anandhg02 Linux - General 7 12-28-2004 12:30 AM
Syslog setup jolu2000 Linux - General 0 06-03-2004 06:02 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:55 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration