>From the sound of it, it seems that the default UDP or TCP remote logging feature in syslog-ng is not acceptable. I don't recall if there was a reason stated for this, but these protocols generally do a very good job at getting logs off of the firewall and onto something more able to analyze, search and archive these objects.
If you think these might work for your situation, there are several tutorials out there for setting this up. Good luck, -=Tom Nail On Feb 8, 2016 7:32 AM, "Erich Titl" <erich.t...@think.ch> wrote: > Hi Sven > > Am 07.02.2016 um 16:24 schrieb Sven Kirmess: > > My current netfilter firewall produces about 80'000 lines of log per day. > > Don't you think that is a bit overdoing it. I would not call this a > firewall but a sniffer, as you probably log every connection attempt. > > cheers > > ET > > > > ------------------------------------------------------------------------------ > Site24x7 APM Insight: Get Deep Visibility into Application Performance > APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month > Monitor end-to-end web transactions and take corrective actions now > Troubleshoot faster and improve end-user experience. Signup Now! > http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 > ------------------------------------------------------------------------ > leaf-user mailing list: leaf-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/leaf-user > Support Request -- http://leaf-project.org/ > ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/