Hi,
On your Rsyslog server you have install sec and to monitor the
logfile you need like this
sec --input=/path/to/log/file/*.log
--input=/path/to_another/log/file/*.log --conf=/etc/sec.conf
That's all. You have nothing to do on the "client" side.
Ludovic.
Le 21/12/2011 11:33, Kaushal Shriyan a écrit :
On Wed, Dec 21, 2011 at 2:02 PM, Risto Vaarandi<risto.vaara...@seb.ee>wrote:
On 12/21/2011 01:43 AM, Kaushal Shriyan wrote:
Hi
I have gone through
http://simple-evcorr.**sourceforge.net/<http://simple-evcorr.sourceforge.net/>and
it is
quite interesting and there is also a learning process. At present I am
using rsyslog daemon as a centralized server and several rsyslog clients
connecting to it. Not sure i understand how sec is used in conjunction
with rsyslog daemon.
Please help me understand.
It is easy -- you have to set up SEC to monitor log files that rsyslog
creates. In order to match rsyslog events relevant in your environment, you
have to write down patterns and rules according to your site's needs.
regards,
risto
Hi Risto
Thanks for the reply, Any how to or write up docs/tutorials to set "SEC
monitoring" on Ubuntu Linux Server 10.04 LTS. So my current setup is i have
a centralized rsyslog server and around 100 rsyslog clients which pushes
logs.
Not sure where would the SEC Monitoring fit in my setup. Do i need to set
SEC client and Server setup together.
Help me understand.
Regards
Kaushal
------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create
new or port existing apps to sell to consumers worldwide. Explore the
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
--
- - - - - - - - - - - - - - -
Ludovic Hutin
Pôle Supervision
Académie de Nancy-Metz
03 83 86 27 39
------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create
new or port existing apps to sell to consumers worldwide. Explore the
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
