Link to home
Start Free TrialLog in
Avatar of AXISHK
AXISHK

asked on

Setup syslog-ng on RedHat

Any quick reference guide that can help me to setup a syslog-ng on Redhat / Centos ? I need to setup it up within a very short time...

Tks
Avatar of giltjr
giltjr
Flag of United States of America image

Need a little more detail.  Do you need to do any more than a basic setup?
Syslog/syslog are installed by default d are configurable through /etc/syslog.conf or /etc/r syslog.conf
Syslog-ng if not mistaken is a syslog function one installed on a windows system.

Rsyslog is a more robust version of syslog, includes external tie-ins, functionality.

The transition, is yum erase syslog, yum install rsyslog.
SOLUTION
Avatar of giltjr
giltjr
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of AXISHK
AXISHK

ASKER

I need to setup syslog-ng on the current RedHat, appreciate for any useful resource to set it up shortly, Tks
In short it is not available through a repository, you either need to find an RPM and install it, or get tge source, compile and install?
Doesn't the existing version do what you need?
Avatar of AXISHK

ASKER

Existing RedHat servers don't have subscription, probably need to download the package and install it manually.

Afterwards, I need to configure it.

Really need some quick reference to set it up within a short period of time.... Tks
You keep saying that you need to quickly configure, without any info in what it is you are looking for it to do.

What do you need it to be able to do?
Avatar of AXISHK

ASKER

1. install the syslog-ng on RedHat servers.
2. Configure it to send the Apache log and error log ( in a particular directories) to a centralized servers.


Tks
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of AXISHK

ASKER

last question ... Any good reference guide such that I can go through the setup step-by-step.... Tks
Usually the syslog.conf includes some examples/descriptions.
similar with rsyslog.conf

Using man or apropo syslog/rsyslog there are sections dealing with the conf files as well.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I just checked and we are running RedHat 6.4 which seems to come with rsyslog by default and as Arnold has pointed out it can forward to remote syslog servers.

So do you really need syslog-ng installed, or do you just need to have the Apache logs forwarded to a central syslog server?
Avatar of AXISHK

ASKER

How to forward Apache log ot the central syslog ? Tks
http://httpd.apache.org/docs/2.4/logs.html

ErrorLog syslog:facility
TransferLog syslog:facility
where facility is the level that you will then use in the syslog.conf to forward the requests.
You can have two entries in syslog.conf one writes the data to file, while another forwards the request....
Avatar of AXISHK

ASKER

Say for a apache server to send log to syslog ng
On syslog-ng server, under /etc/syslog-ng/syslog-ng.conf :
 - create a new configuration file, setup the filter and destination for the device.

On Apache, no need to install syslog-ng, no need to install syslog-ng, correct ?
Can you show me where configuration file and setting should I need to change in Apache,  

Thanks again.
This ongoing thread has derived from the original question. I suggest opening a new thread for the specific setup regarding syslog-ng and apache.
Avatar of AXISHK

ASKER

Tks