Hi All, My goal is to centralized all system/apps logs from different web farm servers. I have the following setups:
node0 - Centralized rsyslog server web_farm1 - web farm 1 server running RHEL, rsyslog, and httpd with different vhost. web_farm2 - web farm 2 server running RHEL, rsyslog, and httpd with different vhost. 1) How can I configure rsyslog from node0 to capture all vhost logs from web_farm servers and all logs will be directly placed like: /var/log/syslog/web_farm1/<vhost>-error.log /var/log/syslog/web_farm1/<vhost>-access.log 2) How to configure the httpd service in web_farm servers to push all logs to node0 syslog server? I saw from internet like the following. httpd.conf: ErrorLog "|/bin/logger -p local5.err" CustomLog "|/bin/logger -p local6.info" rsyslog.conf: *.* @node0 Thank you. Regards, James _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

