Centralized Log server

[Kenneth Kirchner]

RedHat 5 should ship with rsyslog, which is a drop-in replacement for the syslogd package that is normally installed.  The rsyslog can do pretty much everything the syslog-ng package will do.  You can pattern match syslog entries and save them to different files.

-KK

On Jul 21, 2010, at 3:18 PM, Cesar Covarrubias wrote:

> Dave,
> 
> Not exactly sure if syslogd handles this, but I know syslog-ng does. http://www.balabit.com/network-security/syslog-ng/
> 
> Cesar Covarrubias
> 
> On 07/21/2010 03:02 PM, Dave Martini wrote:
>> Setting up a centralized RHEL syslog server.
>> I've set SYSLOGD_OPTIONS="-m 0 -r -x"
>> in /etc/sysconfig/syslog.
>> 
>> I've set my clients to point to the server in /etc/syslog.conf.
>> 
>> Is there a way to have log info from certain client platforms
>> go to separate log files on the log server?
>> 
>> For instance, I'd like my Mac OSX clients to send their log
>> information to a separate log file on my syslog server
>> than my Linux clients go to.
>> 
>> Both client types however have the same entry in their
>> /etc/syslog.conf files
>> 
>> *.*     @syslogserver
>> 
>> So how can it be distinguished?
>> 
>> Is there an entry in the servers /etc/syslog.conf that could
>> determine if the logs are coming from OSX vs. Linux?
>> 
>> Thanks.
>> David Martini
>> LLNL
>> 
> 
> -- 
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list