[Freeipa-users] dirsrv access log redirect

[Mike LoSapio]

You can use this. 

http://www.rsyslog.com/doc/imfile.html





On 8/21/14, 9:54 AM, "Rich Megginson" <rmeggins at redhat.com> wrote:

>On 08/21/2014 06:59 AM, Rob Crittenden wrote:
>> barrykfl at gmail.com wrote:
>>> Hi:
>>>
>>> I m not avaibable to test the pipe setting as the servers are live now
>>> and need restrt..can i simply config rsyslog server using
>>> /var/log/dirsrv/slapf-abc.com/access
>>><https://urldefense.proofpoint.com/v1/url?u=http://slapf-abc.com/access&
>>>k=fDZpZZQMmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2n%2BOWoKLZBLdyvsujbjT
>>>a%2Bu0JdpPSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3TETggnxgkKN%2BOCs%3D%0
>>>A&s=0697d19c286f8960436806a08c1db329b315eda30cb1251762522b95d3a4419a>
>>> to redirect ot another rsyslog server ?
>> Please keep responses on the list.
>>
>> I don't know, perhaps someone else does.
>
>I don't understand the question.  dirsrv does not use syslog.  You would
>have to use the Named Pipe thing and write your own script to send the
>contents of the access log to syslog/rsyslog.
>
>>
>> rob
>>
>>>
>>>
>>> 2014-08-20 21:15 GMT+08:00 Rob Crittenden <rcritten at redhat.com
>>> <mailto:rcritten at redhat.com>>:
>>>
>>>      Dmitri Pal wrote:
>>>      > On 08/20/2014 06:23 AM, barrykfl at gmail.com
>>>      <mailto:barrykfl at gmail.com> wrote:
>>>      >> Dear all:
>>>      >>
>>>      >> I got 2 servers as cluster ... how can i redirect all logs
>>>server2 's
>>>      >> /var/log/dirsrv/slapd-abc.com/access
>>>      
>>><https://urldefense.proofpoint.com/v1/url?u=http://slapd-abc.com/access&
>>>k=fDZpZZQMmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2n%2BOWoKLZBLdyvsujbjT
>>>a%2Bu0JdpPSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3TETggnxgkKN%2BOCs%3D%0
>>>A&s=e9bd6622c394ecea1514bb0a5a9c658d36d92287bc0687c694839969237c574f>
>>><https://urldefense.proofpoint.com/v1/url?u=http://slapd-abc.com/access&
>>>k=fDZpZZQMmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2n%2BOWoKLZBLdyvsujbjT
>>>a%2Bu0JdpPSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3TETggnxgkKN%2BOCs%3D%0
>>>A&s=e9bd6622c394ecea1514bb0a5a9c658d36d92287bc0687c694839969237c574f> to
>>>      >> server 1 's  /var/log/dirsrv/slapd-abc.com/access
>>>      
>>><https://urldefense.proofpoint.com/v1/url?u=http://slapd-abc.com/access&
>>>k=fDZpZZQMmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2n%2BOWoKLZBLdyvsujbjT
>>>a%2Bu0JdpPSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3TETggnxgkKN%2BOCs%3D%0
>>>A&s=e9bd6622c394ecea1514bb0a5a9c658d36d92287bc0687c694839969237c574f>
>>>      >> 
>>><https://urldefense.proofpoint.com/v1/url?u=http://slapd-abc.com/access&
>>>k=fDZpZZQMmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2n%2BOWoKLZBLdyvsujbjT
>>>a%2Bu0JdpPSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3TETggnxgkKN%2BOCs%3D%0
>>>A&s=e9bd6622c394ecea1514bb0a5a9c658d36d92287bc0687c694839969237c574f>
>>>      >>
>>>      >> so i can view once ?what config should consider ?  Or should i
>>>use
>>>      >> syslog to collect server2
>>>      >> and redirect all to server 1 ?
>>>      >>
>>>      >> thks
>>>      >>
>>>      >>
>>>      >>
>>>      > You should use log collection tools of your choice to collect
>>>and
>>>      > process the logs.
>>>      > You can send logs to syslog and then use rsyslog to collect it.
>>>After
>>>      > that you can use different tools to process it: logstash,
>>>splunk, etc.
>>>
>>>      Take a look at this page for instructions on redirecting logging
>>>in
>>>      389-ds: 
>>>https://urldefense.proofpoint.com/v1/url?u=http://www.port389.org/wiki/N
>>>amed_Pipe_Log_Script&k=fDZpZZQMmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2
>>>n%2BOWoKLZBLdyvsujbjTa%2Bu0JdpPSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3T
>>>ETggnxgkKN%2BOCs%3D%0A&s=8c04f5678b42c1447199d8156d262952ed4699d479f77a8
>>>54c6d062843c55251
>>>
>>>      rob
>>>
>>>      --
>>>      Manage your subscription for the Freeipa-users mailing list:
>>>      
>>>https://urldefense.proofpoint.com/v1/url?u=https://www.redhat.com/mailma
>>>n/listinfo/freeipa-users&k=fDZpZZQMmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2F
>>>CtC2n%2BOWoKLZBLdyvsujbjTa%2Bu0JdpPSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4c
>>>vc3TETggnxgkKN%2BOCs%3D%0A&s=2d47703b2e0fe0f7e7e0483a60087064ead7232f809
>>>26069c422618d09f3b89b
>>>      Go To 
>>>https://urldefense.proofpoint.com/v1/url?u=http://freeipa.org/&k=fDZpZZQ
>>>MmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2n%2BOWoKLZBLdyvsujbjTa%2Bu0Jdp
>>>PSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3TETggnxgkKN%2BOCs%3D%0A&s=46c88
>>>503d24246c7333d66185f382446351d3a3719f20e3dfdc9c5a2921cf615 for more
>>>info on the project
>>>
>>>
>
>-- 
>Manage your subscription for the Freeipa-users mailing list:
>https://urldefense.proofpoint.com/v1/url?u=https://www.redhat.com/mailman/
>listinfo/freeipa-users&k=fDZpZZQMmYwf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2
>n%2BOWoKLZBLdyvsujbjTa%2Bu0JdpPSEU%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3TET
>ggnxgkKN%2BOCs%3D%0A&s=2d47703b2e0fe0f7e7e0483a60087064ead7232f80926069c42
>2618d09f3b89b
>Go To 
>https://urldefense.proofpoint.com/v1/url?u=http://freeipa.org/&k=fDZpZZQMm
>Ywf27OU23GmAQ%3D%3D%0A&r=8E1gsOSt%2FCtC2n%2BOWoKLZBLdyvsujbjTa%2Bu0JdpPSEU
>%3D%0A&m=xi7h2Vatp0VcMsq6kgqvowQ4cvc3TETggnxgkKN%2BOCs%3D%0A&s=46c88503d24
>246c7333d66185f382446351d3a3719f20e3dfdc9c5a2921cf615 for more info on
>the project
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5043 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140821/33e5dca7/attachment.p7s>