syslog ng conf examples

configuration.Install Installation is simple. To make it as easy as possible, I will install it from the standard repository. Open a terminal window and run the following command: sudo apt install syslog-ng You must run the above command on both the collector and the client machine. After the installation is complete, you will start to configure.Configure collectors Now, we start to configure the log co

-server-0.9.5 graylog2 Cp/usr/local/graylog2/graylog2.conf.example/etc/graylog2.conf 4. Configure Garylog2-serverClick (here) to collapse or open Vim/etc/graylog2.conf —————————————————————— Syslog_listen_port = 515 #将默认的514端口修改为其他未使用端口, because the 514 port is the default port of Syslog-ng, i

Destination d_splunk {tcp ("127.0.0.1" port (1999) localport (999 ));}; Log {source (src); destination (d_splunk );}; # ---------------------------- Code --------------------- end Client Configuration # Configure the client # Vi/etc/syslog. conf # *. * @ LoghostVi/etc/syslog-ng/

There are times when you need to use a bastion machine, but know that the user has used those commands.The name of the Rsyslog property that begins with $ is a variable obtained from the local system, and does not take a variable from the messageFirst, configure the system variables to record the SSH command, and generate files, location/var/log/ssh.log.#vi/etc/profile.d/ssh.sh//Create a file ssh.sh script to store variablesExport History_file=/var/log/ssh.logexport prompt_command= ' {date ' +%y

space limit (use as much as possible) #$ActionQueueSaveOnShutdown on # save messages to disk on shutdown #$ActionQueueType LinkedList # run asynchronously #$ActionResumeRetryCount -1 # infinite retries if host is down # remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional #*.* @@remote-host:514 # ### end of the forwarding rule ### #日志 If non-local storage, you need to specify the remote collection log server IP: Port *.* :ommysql:192.168.1.251:514 # indicates that all types of log

Turn from: http://blog.c1gstudio.com/archives/1765 Logstash + Elasticsearch + kibana+redis+syslog-ng Elasticsearch is an open source, distributed, restful search engine built on Lucene. Designed for cloud computing, to achieve real-time search, stable, reliable, fast, easy to install and use. Supports the use of JSON for data indexing over HTTP. Logstash is a platform for application log, event transmission

1. Install the JDK. 2. Download the decompression flume, modify the bin/netcat-memory-logger.conf, the content is as follows: agent1.sources = Sources1agent1.channels = Channels1 Agent1.sinks = Sinks1agent1.sources.sources1.type =Netcatagent1.sources.sources1.bind = Localhostagent1.sources.sources1.port = 44444agent1.channels.channels1.type =memoryagent1.channels.channels1.capacity = 1000agent1.channels.channels1.transactioncapacity =100agent1.sinks.sinks1.type = Loggeragent1.sources.sources1.ch