Hi Rainer,

The following are my settings in remote php server.

[/etc/rsyslog.conf]
$ModLoad imfile
$InputFileName /var/log/php/example.com/error_log
$InputFileTag example.com.php.error:
$InputFileStateFile stat-example.com
$InputFileSeverity error
$InputFileFacility local6
$InputRunFileMonitor
$InputFilePollingInterval 1
local6.* @192.168.10.125

The problem is it takes 10 seconds to received the php error logs on central
syslog server. How can I speed up the receiving of logs on syslog server? Do
I need to add/modify on any settings?

Thanks.

Regards,
James

On Wed, Jun 30, 2010 at 8:22 PM, Rainer Gerhards
<[email protected]>wrote:

> Hi James,
>
> well, after imfile reads the messages, they *are* already present in
> rsyslog
> and so they are in the syslog server. It is not a push model but rather a
> pull model (the syslog server pulls the messages from the file instead of
> them being pushed to it).
>
> If you mean how to forward them to a remote server: that's business as
> usual,
> so you can just do
>
> *.* @remote-server
>
> ..or use any other forwarding action.
>
> HTH
> Rainer
>
> > -----Original Message-----
> > From: [email protected] [mailto:rsyslog-
> > [email protected]] On Behalf Of James Corteciano
> > Sent: Wednesday, June 30, 2010 1:43 PM
> > To: rsyslog-users
> > Subject: Re: [rsyslog] PHP error logs
> >
> > Hi Rainer,
> >
> > How to push the logs to syslog server?
> >
> > On Wed, Jun 30, 2010 at 4:49 PM, Rainer Gerhards
> > <[email protected]>wrote:
> >
> > > Hi James,
> > >
> > > if I understood you correctly, imfile may be your friend:
> > >
> > > http://www.rsyslog.com/doc-imfile.html
> > >
> > > Rainer
> > >
> > > > -----Original Message-----
> > > > From: [email protected] [mailto:rsyslog-
> > > > [email protected]] On Behalf Of James Corteciano
> > > > Sent: Wednesday, June 30, 2010 5:32 AM
> > > > To: rsyslog-users
> > > > Subject: [rsyslog] PHP error logs
> > > >
> > > > Hi All,
> > > >
> > > > I know this is out of topic here in mailing list but I couldn't get
> > > > into php
> > > > mailing list.
> > > >
> > > > Anyone have try to log php errors and forwarded it to centralized
> > > > rsyslog
> > > > server? I can received logs locally from /var/log/messages
> > (specified
> > > > from
> > > > /etc/php.ini) but I want to forward it to centralized log.
> > > >
> > > > Thanks.
> > > >
> > > > Regards,
> > > > James
> > > > _______________________________________________
> > > > rsyslog mailing list
> > > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > > http://www.rsyslog.com
> > > _______________________________________________
> > > rsyslog mailing list
> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > http://www.rsyslog.com
> > >
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to