[CentOS] Syslog question
I may be posting to the wrong list here, and in that case I apologize in advance, but is there a way to configure the standard Centos 5 syslog daemon to use more local facilities than local0 to local7? Thank you. -- m ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Syslog question
On Thu, 2008-11-20 at 13:29 -0500, Marc G. wrote: I may be posting to the wrong list here, and in that case I apologize in advance, but is there a way to configure the standard Centos 5 syslog daemon to use more local facilities than local0 to local7? Nope. -- Ignacio Vazquez-Abrams [EMAIL PROTECTED] PLEASE don't CC me; I'm already subscribed signature.asc Description: This is a digitally signed message part ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Syslog question
Thanks. Can any of the syslog alternatives be configured to have more local facilities than what's available in syslog (I think syslog-ng has the same problem) ? -- m On Thu, Nov 20, 2008 at 2:03 PM, Ignacio Vazquez-Abrams [EMAIL PROTECTED] wrote: On Thu, 2008-11-20 at 13:29 -0500, Marc G. wrote: I may be posting to the wrong list here, and in that case I apologize in advance, but is there a way to configure the standard Centos 5 syslog daemon to use more local facilities than local0 to local7? Nope. -- Ignacio Vazquez-Abrams [EMAIL PROTECTED] PLEASE don't CC me; I'm already subscribed ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Syslog question
On Thu, 2008-11-20 at 14:10 -0500, Marc G. wrote: Thanks. Can any of the syslog alternatives be configured to have more local facilities than what's available in syslog (I think syslog-ng has the same problem) ? Unfortunately no. The facilities are defined at the C level; see man 3 syslog for more details. -- Ignacio Vazquez-Abrams [EMAIL PROTECTED] PLEASE don't CC me; I'm already subscribed signature.asc Description: This is a digitally signed message part ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Syslog question
Thank you. On Thu, Nov 20, 2008 at 2:15 PM, Ignacio Vazquez-Abrams [EMAIL PROTECTED] wrote: On Thu, 2008-11-20 at 14:10 -0500, Marc G. wrote: Thanks. Can any of the syslog alternatives be configured to have more local facilities than what's available in syslog (I think syslog-ng has the same problem) ? Unfortunately no. The facilities are defined at the C level; see man 3 syslog for more details. -- Ignacio Vazquez-Abrams [EMAIL PROTECTED] PLEASE don't CC me; I'm already subscribed ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Syslog question
Thanks, I'll check the rsyslog documentation out. I have several apps that generate logs and I want to keep the log statements generated by each app separate. Syslog is great, just that the number of local facilities is not enough. -- m On Thu, Nov 20, 2008 at 5:32 PM, Jim Perrin [EMAIL PROTECTED] wrote: On Thu, Nov 20, 2008 at 2:10 PM, Marc G. [EMAIL PROTECTED] wrote: Thanks. Can any of the syslog alternatives be configured to have more local facilities than what's available in syslog (I think syslog-ng has the same problem) ? -- m As Ignacio has already said, it's pretty much not possible, however you can use rsyslog and its regex filtering capability to sort logs in a more sane fashion, assuming that's what you're going after. Have a look at the rsyslog documentation for their filtering capabilities. -- During times of universal deceit, telling the truth becomes a revolutionary act. George Orwell ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
rsyslog will create a file /var/log/system-hostname.log as soon as messages are received from hostname.. I have spend a couple of hours on rsyslog yesterday.. The version in RHEL/CentOS doesn't appear to be very complete (no tls for example?).. since only the mysql-module is included syslog-ng is very good as well, a little easier to config. Cheers, Bart - Original Message - From: James Pifer [EMAIL PROTECTED] To: CentOS mailing list centos@centos.org Sent: Tuesday, July 29, 2008 10:31:53 PM GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: Re: [CentOS] syslog question On Tue, 2008-07-29 at 12:52 -0600, Milton Calnek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Pifer wrote: | Yeah, that was pretty easy. Any way to get it to save logs from | different hosts to specific files? You need rsyslog for that. I believe that FC9 has an rpm for it. There are other places to find one as well. KB may have one in his repo. Okay, I have rsyslog running and regular syslog stopped. Also chkconfig'ed them. I added this to /etc/rsyslog.conf: $template DynaFile,/var/log/system-%HOSTNAME%.log *.* -?DynaFile The log that gets created for my router is called: system-Tue,.log So I've been trying to modify it using a different propnames instead of %HOSTNAME%. So far all I get for a result is: system-**INVALID PROPERTY NAME**.log In upper and lower case I've tried: source fromhost fromhost-ip Any suggestions? It's so close now! Thanks, James ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] syslog question
I have a 64bit centos 5.2 system. My router supports sending logs to a syslog server, so I was hoping to send them to my centos box so they are easier to keep an eye on. I've been googling for howto's etc, but I didn't think syslog would be that difficult. Do I need to use syslog-ng or can I use the syslog that's installed with centos 5.2? Any suggestions or guidance? Thanks, James ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
Syslog (or rsyslog) will do.. Have a look at /etc/sysconfig/(r)syslog Cheers, Bart - Original Message - From: James Pifer [EMAIL PROTECTED] To: CentOS centos@centos.org Sent: Tuesday, July 29, 2008 8:32:19 PM GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: [CentOS] syslog question I have a 64bit centos 5.2 system. My router supports sending logs to a syslog server, so I was hoping to send them to my centos box so they are easier to keep an eye on. I've been googling for howto's etc, but I didn't think syslog would be that difficult. Do I need to use syslog-ng or can I use the syslog that's installed with centos 5.2? Any suggestions or guidance? Thanks, James ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Pifer wrote: | I have a 64bit centos 5.2 system. My router supports sending logs to a | syslog server, so I was hoping to send them to my centos box so they are | easier to keep an eye on. | On your CentOS box, edit /etc/sysconfig/syslog. The comments in the file should be sufficient. - -- Milton Calnek BSc, A/Slt(Ret.) [EMAIL PROTECTED] 306-717-8737 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFIj2MYHgnbf2T2QqMRAqUxAJ4skpas/41mgW+5ajDd9rwOHe7i4gCgnsLe CcBbjWL0kf/j2sfbJdZgFJc= =F8fm -END PGP SIGNATURE- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
On Tue, Jul 29, 2008 at 02:32:19PM -0400, James Pifer wrote: Any suggestions or guidance? By default, your syslog does not accept syslog entries from remote systems. Edit /etc/sysconfig/syslog, and add a '-r' parameter to the SYSLOGD_OPTIONS option, and restart syslog. -- /\oo/\ / /()\ \ David Mackintosh | [EMAIL PROTECTED] | http://www.xdroop.com pgprV1aNCrgeR.pgp Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
James Pifer wrote: | I have a 64bit centos 5.2 system. My router supports sending logs to a | syslog server, so I was hoping to send them to my centos box so they are | easier to keep an eye on. | On your CentOS box, edit /etc/sysconfig/syslog. The comments in the file should be sufficient. Yeah, that was pretty easy. Any way to get it to save logs from different hosts to specific files? Thanks, James ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Pifer wrote: | Yeah, that was pretty easy. Any way to get it to save logs from | different hosts to specific files? You need rsyslog for that. I believe that FC9 has an rpm for it. There are other places to find one as well. KB may have one in his repo. - -- Milton Calnek BSc, A/Slt(Ret.) [EMAIL PROTECTED] 306-717-8737 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFIj2buHgnbf2T2QqMRAvMRAKCv9aZEdoCRqAkm6xxyC9oiFpbKUwCgn2an YUK8Z2AApCHpEr3DqSc7sQM= =rW8A -END PGP SIGNATURE- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
On Tue, Jul 29, 2008 at 02:46:39PM -0400, James Pifer wrote: Yeah, that was pretty easy. Any way to get it to save logs from different hosts to specific files? I use syslog-ng for that, I think from rpmforge. http://wiki.xdroop.com/space/Sun/Syslog-ng -- /\oo/\ / /()\ \ David Mackintosh | [EMAIL PROTECTED] | http://www.xdroop.com pgpIZg9NHVcf6.pgp Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
On Tuesday 29 July 2008, David Mackintosh wrote: On Tue, Jul 29, 2008 at 02:46:39PM -0400, James Pifer wrote: Yeah, that was pretty easy. Any way to get it to save logs from different hosts to specific files? I use syslog-ng for that, I think from rpmforge. http://wiki.xdroop.com/space/Sun/Syslog-ng Worth noting, rsyslog-2.0.0-11.el5 is in base since CentOS-5.2. /Peter signature.asc Description: This is a digitally signed message part. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter Kjellstrom wrote: | | Worth noting, rsyslog-2.0.0-11.el5 is in base since CentOS-5.2. | ooh... that's definately worth noting. - -- Milton Calnek BSc, A/Slt(Ret.) [EMAIL PROTECTED] 306-717-8737 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFIj267Hgnbf2T2QqMRApE5AKC+Bv/w+8+QYvY04I/pdAYYNieXrACggOG7 VN0spiamfmC2MYYXD0dwozQ= =4veT -END PGP SIGNATURE- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
On Tue, 2008-07-29 at 12:52 -0600, Milton Calnek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Pifer wrote: | Yeah, that was pretty easy. Any way to get it to save logs from | different hosts to specific files? You need rsyslog for that. I believe that FC9 has an rpm for it. There are other places to find one as well. KB may have one in his repo. Okay, I have rsyslog running and regular syslog stopped. Also chkconfig'ed them. I added this to /etc/rsyslog.conf: $template DynaFile,/var/log/system-%HOSTNAME%.log *.* -?DynaFile The log that gets created for my router is called: system-Tue,.log So I've been trying to modify it using a different propnames instead of %HOSTNAME%. So far all I get for a result is: system-**INVALID PROPERTY NAME**.log In upper and lower case I've tried: source fromhost fromhost-ip Any suggestions? It's so close now! Thanks, James ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] syslog question
James Pifer wrote: Any suggestions? It's so close now! I've never heard of rsyslog myself it sounds new, I've been using syslog-ng for at least 6 years now and it works great. Here is a sample config I ran at my last company: client: http://portal.aphroland.org/~aphro/syslog-ng/syslog-ng.conf_CLIENT server: http://portal.aphroland.org/~aphro/syslog-ng/syslog-ng.conf_SERVER While there is a newer version of syslog-ng available I have stuck to the 1.6.x branch. I think I got the source rpms from a fedora mirror. nate ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
