On May 29, 2017 2:15 PM, "Muhfi Asbin Sagala" <[email protected]> wrote:
Bang R, File log di ubuntu Sudah dicoba dengan menambahkan baris : *.* @@rsyslog_server:514 di baris akhir file /etc/rsyslog.d/50-default.conf dan log dari client berhasil dikirimkan ke server. Tinggal lagi bagaimana cara mengambil log dari apache2/nginx agar bisa dikirim ke server. dulu pernah juga bikin log server, kalo gk salah hanya service yg log nya di lempar ke syslog lokal saja yg log nya bisa terkirim ke remote server (ribet gk sih ngomongnya?) misalnya qmail yg log nya tidak masuk ke syslog maka gk bisa log nya dilempar ke remote log server. Apache setau saya punya log sendiri yg tidak masuk ke syslog lokal, mungkin disitu petunjuknya, kalau bisa log nya dilempar ke syslog lokal mungkin bisa ikut terkirim ke remote log server. Nanti kalau ada titik terang, awak kabari lagi ke milis. Sementara itu, jangan bosan membalas ya abang-abang dan kakak-kakak. :D 2017-05-29 13:22 GMT+07:00 Rinto Exandi Sinaga <[email protected]>: > Pake Windows 2012 ajalah..pusing pun pake linux klen itu... > > On May 29, 2017 12:19, "R" <[email protected]> wrote: > >> sudah dicek secara langsung hasil loggingnya di file /var/log/messages >> - (asumsi diarahkan kesini, tested dengan $logger testing logging). >> coba periksa file configurasi /etc/syslog/syslog-ng.conf - dikarenakan >> ngak pake seperti sistem si penanya - jadi kemungkinan anjuran tidak >> sesuai. >> >> *ramekan lagi. >> >> >> >> >> 2017-05-29 10:53 GMT+07:00 Muhfi Asbin Sagala <[email protected]>: >> > Salam, >> > >> > Selamat siang konkawan, >> > >> > Ada masalah sedikit dengan rsyslog, jadi rencananya ada satu mesin >> sebagai >> > server rsyslog yang dipakai untuk ngumpulkan log akses ke web server >> > (Apache2 / Nginx). >> > >> > Server Rsyslog : Ubuntu 16.04; rsyslog v.8.16.0 >> > Client : Ubuntu 14.04; rsyslog v.7.7.4 >> > >> > Konfigurasi rsyslog server : >> > >> > module(load="imudp") >> > input(type="imudp" port="514") >> > >> > module(load="imtcp") >> > input(type="imtcp" port="514") >> > >> > >> > Konfigurasi client : /etc/rsyslog.d/www.conf >> > >> > $ModLoad imfile >> > >> > $InputFileName /var/log/apache2/access_log >> > >> > $InputFileTag apache.access: >> > >> > $InputFileStateFile /tmp/apache_state_file >> > >> > $InputFileSeverity info >> > >> > $InputFileFacility local3 >> > >> > $InputRunFileMonitor >> > >> > local3.* @@server_rsyslog:514 >> > >> > >> > Setelah di-restart service rsyslog di kedua mesin, tidak ada muncul >> pesan >> > kesalahan. Tapi, log dari client tidak muncul di server. >> > >> > Di periksa trafik ke port 514 di server dengan perintah tcpdump juga >> enggak >> > ada koneksi yang terjadi. Semua setelan (setting) masih default kecuali >> yang >> > disebutkan di atas. >> > >> > Mohon pencerahan, kira-kira dimanakan kesalahan yang saya perbuat. >> > >> > Terima Kasih, >> > Muhfi >> > >> > NB : Udah lama ah gag nulis ke milis (curhat):-) >> > >> > -- >> > Official site : http://medan.linux.or.id/ >> > --- You received this message because you are subscribed to the Google >> > Groups "Medan Linux Community Conference" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an >> > email to [email protected]. >> > To post to this group, send email to [email protected]. >> > For more options, visit https://groups.google.com/d/optout. >> >> >> >> -- >> R Saragih >> >> -- >> Official site : http://medan.linux.or.id/ >> --- >> You received this message because you are subscribed to the Google Groups >> "Medan Linux Community Conference" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. >> > -- > Official site : http://medan.linux.or.id/ > --- > You received this message because you are subscribed to the Google Groups > "Medan Linux Community Conference" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- y! : ti_pa_tu gtalk : muhfi.asbin FB | Twitter | Identica : muhfiasbin http://muhfiasbin.blogspot.com -- Official site : http://medan.linux.or.id/ --- You received this message because you are subscribed to the Google Groups "Medan Linux Community Conference" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- Official site : http://medan.linux.or.id/ --- You received this message because you are subscribed to the Google Groups "Medan Linux Community Conference" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. For more options, visit https://groups.google.com/d/optout.
