"Linux" "Web" Nginx configuration nginx log to remote syslog server

1. Overview:

Mainly for the bar Nginx logs are delivered directly to the remote log collection server. The syslog server in this article is the Qradar of the IBM Log Collection system, as long as the remote log server can receive the log with the ability to support syslog protocol.

2. Environment:

os:red Hat Enterprise Linux Server release 6.7 (Santiago)

Kernel:linux cftjnginx01.homecredit.cn 2.6.32-573.el6.x86_64 #1 SMP Wed Jul 1 18:23:37 EDT x86_64 x86_64 x86_64 gnu/l Inux

Nginx:nginx version:nginx/1.8.0

Qradar:unknown

3. Installation:

3.1. OS Installation (abbreviated)

3.2. Nginx installation (slightly)

3.3. Rsyslog Service: Rhel default installation

4. Configuration:

4.1. Rsyslog Configuration: Default installation

4.2. Nginx Configuration:

Can be configured in either HTTP or server segments, where Access_log and Error_log can be configured.

# syslog means using Syslog protocol # server=10.26.2.65 to indicate a remote server address, or you can specify a local # FACILITY=LOCAL7 to indicate device pipeline usage local7# Tag=nginx The label indicates when the caption is displayed in the log file # Severity=info indicates the log level Access_log syslog:server=10.26.2.65,facility=local7,tag=nginx,severity= Info

　　

"Linux" "Web" Nginx configuration nginx log to remote syslog server