syslog ng remote logging

How to Use syslog-ng to collect logs from a remote Linux machine If your data centers are all Linux servers, you are the system administrator. One of your tasks is to view the server's log files. However, if you view log files on a large number of machines, You need to log in to the machine one by one to read the log files. If you manage a large number of machine

) not NULL auto_increment,' Host ' varchar (+) DEFAULT NULL,' Facility ' varchar DEFAULT NULL,' Priority ' varchar (DEFAULT NULL),' Level ' varchar DEFAULT NULL,' tag ' varchar (DEFAULT NULL),' DateTime ' datetime DEFAULT NULL,' Program ' varchar DEFAULT NULL,' Msg ' text,PRIMARY KEY (' id '),KEY ' Host ' (' Host '),KEY ' program ' (The ' program '),KEY ' datetime ' (' DateTime '),KEY ' priority ' (the ' priority '),KEY ' facility ' (' facility ')) Engine=innodb auto_increment=81 DEFAULT Charset

("/var/log/dmesg ");};Log {source (s_local); filter (f_emerg); destination (d_console );};Log {source (s_local); filter (f_secure); destination (d_secure); flags (final );};Log {source (s_local); filter (f_mail); destination (d_maillog); flags (final );};Log {source (s_local); filter (f_cron); destination (d_cron); flags (final );};Log {source (s_local); filter (f_spooler); destination (d_spooler );};Log {source (s_local); filter (f_local7); destination (d_bootlog );};Log {source (s_local); fil

A recent Sendcloud project requires the use of the Syslog-ng collection log. The principle is multiple production machine deployment of different modules, including Nodejs, Java and so on, each production machine according to a certain rules to generate a log. Generally our production machine redhat default SYSLOGD logging, you can use SYSLOGD to send logs throug

Syslog-ng is installed to manage server logs in a unified manner. The installation method is found online. Some problems need to be solved now; 1. The log server can synchronize the log files on a daily basis, but the log files you want cannot be synchronized to the server because you need to customize the log files. Now, I have posted the configuration documents and hope to learn from them. Install

); Owner (root ); Group (root ); Perm (0640 ); Dir_perm (0750 ); }; Source src { # Message generated by Syslog-NG # Internal (); # Standard Linux log source (this is the default place for the syslog () # Function to send logs) # Unix-stream ("/dev/log "); # Messages from the kernel # Pipe ("/proc/kmsg "); # Remote po

: Destination d_udp {UDP ("loghost" port (514 ));}; log {source (SRC); destination (d_udp) ;}; restart the syslog-ng service #/etc/init. d/syslog-ng restart winodws server configuration because Windows server does not support log server, you need to install a conversion software: L