Further to this, here's the relevant bits from one of my syslog-ng files. A word of note: the devices at /vservers/.devs/<name>/dev are bind mounted into the vserver by another part of the startup... you could change them safely to /vservsers/<name>/dev/log. This whole configuration is generated with a script. You can ignore the mysql bits if you're not doing this, naturally.
Cheers, Liam -------- log { source(vservers) ; destination(vservers); destination (console_9) ; }; source bind {unix-stream ("/vservers/.devs/bind/log") ;} ; source ldap {unix-stream ("/vservers/.devs/ldap/log") ;} ; source mysql {unix-stream ("/vservers/.devs/mysql/log") ;} ; source pdns {unix-stream ("/vservers/.devs/pdns/log") ;} ; source swivel {unix-stream ("/vservers/.devs/swivel/log") ;} ; source test {unix-stream ("/vservers/.devs/test/log") ;} ; source zmf {unix-stream ("/vservers/.devs/zmf/log") ;} ; destination mysql_bind { pipe ("/var/run/mysqld/mysql_bind.pipe" template("INSERT INTO logs (host,vserver,facility,priority,level,tag,date,time,program,msg) VALUES ('$HOST','bind','$FACILITY','$PRIORITY','$LEVEL','$TAG','$YEAR-$MONTH- $DAY','$HOUR:$MIN:$SEC','$PROGRAM','$MSG');\n") template-escape(yes)); } ; log { source (bind); destination (mysql_bind) ; } ; ... (repeated for each vserver) ... log { source (bind); source (ldap); source (mysql); source (pdns); source (swivel); source (test); source (zmf); destination (vservers) ; destination (console_9) ; } ; Cheers, Liam On Wed, 2004-12-29 at 01:58 +0100, Herbert Poetzl wrote: > On Tue, Dec 28, 2004 at 07:19:50PM +0100, Oliver Welter wrote: > > Hi Folks, > > > > question on syslog.... > > > > What is the best way to use syslog inside the vServers - is it possible > > to have one Logfile on the main maschine that collects all information ? > > yes, definitely > > > Whats the best way to do so ? > > separate sockets for each vserver, combined > by one syslog daemon (syslog-ng) is probably > the best choice here ... > > > Sharing a syslock socket ? > > not a good idea, neither security nor performance > wise ... > > > Creating a syslog instance fpr each vServer and using > > network-feature of syslog ? > > second best choice, almost as fast as sockets > but might be more secure ... > > > I am running Gentoo with syslog-ng if this matters.... > > > > THX > > > > Oliver > > -- > > Diese Nachricht wurde digital unterschrieben > > oliwel's public key: http://www.oliwel.de/oliwel.crt > > Basiszertifikat: http://www.ldv.ei.tum.de/page72 > > best, > Herbert > > > _______________________________________________ > > Vserver mailing list > > Vserver@list.linux-vserver.org > > http://list.linux-vserver.org/mailman/listinfo/vserver > > _______________________________________________ > Vserver mailing list > Vserver@list.linux-vserver.org > http://list.linux-vserver.org/mailman/listinfo/vserver > -- Liam Helmer <[EMAIL PROTECTED]> _______________________________________________ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver