Solved

Linux Log Server

Posted on 2003-11-25
3
303 Views
Last Modified: 2010-03-18
I want to ser up a linux server ( RH 9 ) as one log server.  I have syslog
setup so it will take other servers logfiles...  All logfiels not on the log server ( other servers, printers firewall sending their log files )  dump their logs to /var/log/messages
file.

 I want to have a different  file for each server reporting to the one log server
I can't seem to fugure how this works and help ?

I don't want one big log file ( messages ) I would like each device to have it's own file

Thanks
0
Comment
Question by:clarksell
3 Comments
 
LVL 44

Accepted Solution

by:
Karl Heinz Kremer earned 250 total points
ID: 9822111
Some BSD syslogd do support the grouping of rules by hostname, which allows to log all messages from one host to one file. Unfortunately the syslog daemons usually packaged with Linux systems do not support this.

You can run syslog-ng (http://www.balabit.com/products/syslog_ng/), which also supports this. The sample configuration file at http://www.campin.net/syslog-ng.conf shows (near the end of the file) under the heading "automatic host sorting (usually used on a loghost)" how this is done.

I've never used this myself (always wanted to try it, but never found the time), but if you find interesting problems with it, I may be willing to play with it :-)
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now