Hello list, I just configured my log system. I have some servers with rsyslog
as client and a log server with syslog-ng.
On the client-side I send all system logs this way:
$ cat /etc/rsyslog.conf
$ModLoad imuxsock
$ModLoad imklog
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$RepeatedMsgReduction on
$KLogPath /proc/kmsg
$WorkDirectory /rsyslog/work
$ActionQueueType LinkedList
$ActionQueueFileName srvrfwd1
$ActionResumeRetryCount -1
$ActionQueueSaveOnShutdown on
*.* @@logserver
With this configuration, I have this logs:
$ tree /var/log/extern/host1/
/var/log/extern/host1/
âââ 2011-07
âââ auth
âââ authpriv
âââ cron
âââ daemon
âââ syslog
âââ user
I want to add Apache logs, this is how I configure the Apache logs:
ErrorLog /var/www/domain1/log/error.log
LogLevel warn
SetEnvIf Remote_Addr "x\.x\.x\.x" dontlog
SetEnvIf Remote_Addr "y\.y\.y\.y" dontlog
CustomLog /var/www/domain1/log/access.log common env=!dontlog
On the same machine I have lots of vhost logs:
/var/www/domain1/log/error.log
/var/www/domain1/log/access.log
/var/www/domain2/log/error.log
/var/www/domain2/log/access.log
/var/www/domain3/log/error.log
/var/www/domain3/log/access.log
...
Is possible to send all vhost logs to the log server?
Thanks for all your great help, kind regards.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
