On Sun, Feb 8, 2009 at 6:46 PM, Lakshmanan Palaniappan <
[email protected]> wrote:
> You can set filters and segregate them in syslog-ng configuration file
> syslog-ng.conf.
>
> log { source(src); filter(f_news); destination(location); };
>
> src - remote or local
> filter - what is the keyword for logging. For example, filter
> filter_name { match("Any matching wor in the log"); }
> destination - local or remote, in local you can give local file name
>
> --
> Lakshmanan
>
>
> On Sun, Feb 8, 2009 at 12:04 PM, jack
> <[email protected]<jackman0091%40yahoo.com>>
> wrote:
>
> > I want to set up a remote syslog server in which all
> > 20 lnux syslog logs would be collected
> >
> > The problem is that the all the servers syslog entries get collected in
> > only one file messages
> >
> > i want to set it an a way the all logs of the servers should be created
> by
> > hostname
> >
> > Is there a way
> >
> > Add more friends to your messenger and enjoy! Go to
> > http://messenger.yahoo.com/invite/
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
>
> [Non-text portions of this message have been removed]
>
>
>
Hi,
Please check you have made he following changes on the server.
vi /etc/rsyslog.conf
$ModLoad immark.so # provides --MARK-- message capability
$ModLoad imudp.so # provides UDP syslog reception
$ModLoad imtcp.so # provides TCP syslog reception and GSS-API (if compiled
to support it)
$ModLoad imuxsock.so # provides support for local system logging (e.g. via
logger command)
$ModLoad imklog.so # provides kernel logging support (previously done by
rklogd)
$template DynaFile,"/var/log/system-%HOSTNAME%.log" == What you require
*.* -?DynaFile
$ModLoad imudp.so
$UDPSeverAddress X.Y.Z.Z
$UDPServerRun 514
--
Ashwin R.
[Non-text portions of this message have been removed]
