[SOLVED] I can send syslog log to rsyslog server? how?

JohnV2 · 10-11-2011, 12:49 PM

Hi,

I already configured to send log through rsyslog to another rsyslog, using logger (Ex: ErrorLog "|/usr/bin/logger -t httpd -p local7.err"
). And I don't have any problem.

1) But I need to know, if I can without install rsyslog, I mean through syslog to send some log to the server with have rsyslog previously configure. If is possible, how?

2) If is possible without using |/usr/bin/logger? because logger changes the log and I can't read (some app read that log, and then I need to modify all the regular expression).

I already test send some log through syslog to rsyslog, but without luck.

Additional information: I used httpd log

Thank for the help.

John

unSpawn · 10-11-2011, 02:22 PM

Quote:

Originally Posted by JohnV2

I already configured to send log through rsyslog to another rsyslog, using logger (..) If is possible without using |/usr/bin/logger? (..) I already test send some log through syslog to rsyslog, but without luck.

Syslog can not read files itself but Rsyslog can, so you do not need to pipe through 'logger'. Here is an example:

Code:

$InputFileName /path/to/process.log
$InputFileTag tagname
$InputFileStateFile processname.state
$InputFileSeverity info
$InputFileFacility local1
$InputRunFileMonitor

JohnV2 · 10-11-2011, 06:09 PM

Hi,

Thanks for the replay, Ok, but hmmm I think I don't follow you... some application uses syslog:localX in the config file but other use or "I believe that use" |/usr/bin/logger like this example (httpd.conf), because is no other way:

Quote:

CustomLog "|/usr/bin/logger -t httpd -p local6.info" combined

so, where I use this, in rsyslog righ?:

Quote:

$InputFileName /path/to/process.log
$InputFileTag tagname
$InputFileStateFile processname.state
$InputFileSeverity info
$InputFileFacility local1
$InputRunFileMonitor

I configure this you give and then I send to the other server, righ? I ask for to be sure because I'm not working right now.

John.

unSpawn · 10-11-2011, 06:50 PM

Quote:

Originally Posted by JohnV2

because is no other way

You mean you can't use a CustomLog directove without directing output straight to file which rsyslog then can read?..

Quote:

Originally Posted by JohnV2

so, where I use this, in rsyslog righ?:

Yes.

Quote:

Originally Posted by JohnV2

I configure this you give and then I send to the other server, righ?

Yes. File gets read by rsyslog directly. Rsyslog then sends to remote rsyslog.

JohnV2 · 10-11-2011, 08:29 PM

Quote:

Originally Posted by unSpawn

You mean you can't use a CustomLog directove without directing output straight to file which rsyslog then can read?..

Sorry about that

I was a little distracted, I know what you mean. Thanks unSpawn

is very useful... Question 2 Done!

John

unSpawn · 10-12-2011, 11:39 AM

Please mark your thread "solved" then.

JohnV2 · 10-13-2011, 08:55 AM

Quote:

Originally Posted by unSpawn

Please mark your thread "solved" then.

Yes, thanks... sorry I was busy yesterday... I ask here about the other questions (the firts one): link

Thanks unSpawn.

John