Remote syslog

Hello !

I've understood how to send logs to another machine on the client machine.
Something like :

facility.level @hostname

hostname being the name of the server machine receiving the logs.

But what I don't understand, is where on the server do I specify the way I
receive these logs ?

For example, on the server machine, I want to to say that the logs I
received for a facility should be written in a file, and the logs received
for another facility are stored in another file.

Please help, nothing on the net, I think the stuff is too obvious for me to
see it...

Thanks !

tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
> Hello !
>
> I've understood how to send logs to another machine on the client
> machine. Something like :
>
> facility.level @hostname
>
> hostname being the name of the server machine receiving the logs.
>
> But what I don't understand, is where on the server do I specify the
> way I receive these logs ?

man syslog.conf


--
Madhur Ahuja [madhur<underscore>ahuja<at>yahoo<dot>com]

Homepage
http://madhur.netfirms.com

"Madhur Ahuja" <ef@df.com> a écrit dans le message de news:
2so622F1ndm99U1@uni-berlin.de...
> tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
>> Hello !
>>
>> I've understood how to send logs to another machine on the client
>> machine. Something like :
>>
>> facility.level @hostname
>>
>> hostname being the name of the server machine receiving the logs.
>>
>> But what I don't understand, is where on the server do I specify the
>> way I receive these logs ?
>
> man syslog.conf
>

OK. Show me in the manpage where it's written.


> --
> Madhur Ahuja [madhur<underscore>ahuja<at>yahoo<dot>com]
>
> Homepage
> http://madhur.netfirms.com
>
>
>
>
>
>

On Sat, 09 Oct 2004 00:11:30 +0200, tibo wrote:

> "Madhur Ahuja" <ef@df.com> a écrit dans le message de news:
[snips]
>>
>> man syslog.conf
>>
>
> OK. Show me in the manpage where it's written.
>
Try man syslogd - see section "SUPPORT FOR REMOTE LOGGING"
I think you'll be needing the -r option.


B.
--
668: The Neighbour of the Beast.

tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
> "Madhur Ahuja" <ef@df.com> a écrit dans le message de news:
> 2so622F1ndm99U1@uni-berlin.de...
>> tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
>>> Hello !
>>>
>>> I've understood how to send logs to another machine on the client
>>> machine. Something like :
>>>
>>> facility.level @hostname
>>>
>>> hostname being the name of the server machine receiving the logs.
>>>
>>> But what I don't understand, is where on the server do I specify the
>>> way I receive these logs ?
>>
>> man syslog.conf
>>
>
> OK. Show me in the manpage where it's written.

You need a syslogd server running on the remote machine. I think on the
remote machine you can configure logging, the same way as you would do on
the local machine i.e. by configuring /etc/syslog.conf.

Correct me if I am wrong.

--
Madhur Ahuja [madhur<underscore>ahuja<at>yahoo<dot>com]

Homepage
http://madhur.netfirms.com

"Madhur Ahuja" <ef@df.com> a écrit dans le message de news:
2spo7hF1nmcpvU2@uni-berlin.de...
> tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
>> "Madhur Ahuja" <ef@df.com> a écrit dans le message de news:
>> 2so622F1ndm99U1@uni-berlin.de...
>>> tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
>>>> Hello !
>>>>
>>>> I've understood how to send logs to another machine on the client
>>>> machine. Something like :
>>>>
>>>> facility.level @hostname
>>>>
>>>> hostname being the name of the server machine receiving the logs.
>>>>
>>>> But what I don't understand, is where on the server do I specify the
>>>> way I receive these logs ?
>>>
>>> man syslog.conf
>>>
>>
>> OK. Show me in the manpage where it's written.
>
> You need a syslogd server running on the remote machine. I think on the
> remote machine you can configure logging, the same way as you would do on
> the local machine i.e. by configuring /etc/syslog.conf.
>
> Correct me if I am wrong.

Yep it's right. But it's not clear at all in the manpage. They only talk
about the client side, maybe they think it's obvious.

It appears that you indeed configure it as if you were receiving local logs.
Everything (local and network) go into the same file, and you have to make
the difference between local logs and network logs with string editors.
So in the /etc/syslog.conf, you can't direct logs coming from a certain
machine to a certain file, and others logs coming from another machine to
another file.

>
> --
> Madhur Ahuja [madhur<underscore>ahuja<at>yahoo<dot>com]
>
> Homepage
> http://madhur.netfirms.com
>
>
>
>
>
>

tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
> "Madhur Ahuja" <ef@df.com> a écrit dans le message de news:
> 2spo7hF1nmcpvU2@uni-berlin.de...
>> tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
>>> "Madhur Ahuja" <ef@df.com> a écrit dans le message de news:
>>> 2so622F1ndm99U1@uni-berlin.de...
>>>> tibo <bartol_78SPAMSUXXX@yahoo.com> wrote:
>>>>> Hello !
>>>>>
>>>>> I've understood how to send logs to another machine on the client
>>>>> machine. Something like :
>>>>>
>>>>> facility.level @hostname
>>>>>
>>>>> hostname being the name of the server machine receiving the logs.
>>>>>
>>>>> But what I don't understand, is where on the server do I specify
>>>>> the way I receive these logs ?
>>>>
>>>> man syslog.conf
>>>>
>>>
>>> OK. Show me in the manpage where it's written.
>>
>> You need a syslogd server running on the remote machine. I think on
>> the remote machine you can configure logging, the same way as you
>> would do on the local machine i.e. by configuring /etc/syslog.conf.
>>
>> Correct me if I am wrong.
>
> Yep it's right. But it's not clear at all in the manpage. They only
> talk about the client side, maybe they think it's obvious.
>
> It appears that you indeed configure it as if you were receiving
> local logs. Everything (local and network) go into the same file, and
> you have to make the difference between local logs and network logs
> with string editors.
> So in the /etc/syslog.conf, you can't direct logs coming from a
> certain machine to a certain file, and others logs coming from
> another machine to another file.
>


Thanks for the clarification tibo!

--
Madhur Ahuja [madhur<underscore>ahuja<at>yahoo<dot>com]

Homepage
http://madhur.netfirms.com