Syslog-ng installation Configuration

1. Install EventLog

Tar zxvf eventlog.tar.gz

Configure -- prefix =/usr/local/EventLog

Make

Make install

2. Install libol

Tar zxvf libol.tar.gz

Configure -- prefix =/usr/local/libol

3. Install syslog-ng

 

4. Tar
Zxvf syslog-ng.tar.gz

Export
Pkg_config_path =/usr/local/EventLog/lib/pkgconfig/

Configure -- prefix =/usr/local/syslog-ng

CD
/Usr/local/syslog-ng/

Mkdir
Etc

CP
DOC/examples/syslog-ng.conf.sample
/Usr/local/syslog-ng/etc/syslog-ng.conf

/Etc/init. d/syslog stop

/Usr/local/syslog-ng/sbin/syslog-ng

 

5. install PHP-syslog-ng

Tar zxvf PHP-syslog-ng

CP htm/*/usr/local/Apache/htdocs

Follow install

Move the script to the/usr/local/Apache directory.

Regularly execute logrotate. php every day

 

 

6. the client configures the Syslog daemon used in Linux. There are two main types: Syslog and syslog-ng1, syslog # vi/etc/syslog. conf *. * @ loghost is the IP address or Host Name of the log server. The host must be correctly resolved to the IP address of the log server. Then restart the syslog service: #/etc/init. d/syslog restart 2. syslog-ng add two lines in the configuration file syslog-ng.conf: Destination d_udp {UDP ("loghost" port (514 ));}; log {source (SRC); destination (d_udp) ;}; restart the syslog-ng service #/etc/init. d/syslog-ng restart winodws server configuration because Windows server does not support log server, you need to install a conversion software: Logging. The decompressed files are evtsys.dlland evtsys.exe.
Copy these two files to the C:/Windows/system32 directory. Open a Windows Command Prompt (START-> RUN cmd)
C:/> evtsys-I-H 192.168.10.100 # (IP address of the log server)
-I indicates that the service is installed as a system service.
-H: Specify the IP address of the log server
If you want to uninstall evtsys, then:
Net stop evtsys
Evtsys-u start the service:
C:/> Net start evtsys configuration completed :)