Below is documentation for using SourceLabs Self-Support Suite for Linux and Open Source Java to gather, organize, and search Syslog messages.
You can setup syslog to connect to the relay. In this release, we only support syslog over UDP. To set this up, you need to modify your syslogd config file. Often this is in /etc/syslog.conf
To get started, you can add
. @relayMachineName:4657
This will send all your syslog messages to a machine named relayMachineName over port 4657. Port 4657 is the default port the relay listens to for Syslog UDP messages. You can change this in the relay’s property file. This properties file is located in the ‘conf’ directory of your relay installation (e.g. /opt/sourcelabs/relay/conf).
To filter the syslog messages sent to the relay, please read the syslog documentation or man pages for more information.
Syslog-ng:
You can also setup syslog-ng to use the relay. For the current version of the relay, you will need to use UDP logging to the relay instead of TCP. To set this up, you need to modify your syslog-ng config file. Often this is in /etc/syslog-ng.conf
To get started, you can add
destination d_relay { udp("relayMachineName ", port(4657)); };
log { source(s_sys); destination(d_relay); };
Assuming that you are using a default syslog-ng configuration where source ‘s_sys’ represents all syslog messages (modify source as necessary for your configuration),this will send all your syslog messages to a machine named relayMachineName over port 4657. Port 4657 is the default port the relay listens to for Syslog UDP messages. You can change this in the relay’s property file. This properties file is located in the ‘conf’ directory of your relay installation (e.g. /opt/sourcelabs/relay/conf).
To filter the syslog messages sent to the relay, please read the syslog documentation or man pages for more information.
Find more information about SourceLabs Self-Support Suite for LInux and Open Source Java
linux
centos
RedHat
syslog
SuSE
SourceLabs
logging
Ubuntu
Debian
support
Syslog is a protocol for sending log messags over an IP network. It has been standardized by the IETF (documents here)
Originally developed as part of Sendmail, SysLog became the defacto standard for Unix and Linux systems.
A “syslog server” or “syslog daemon” is typically the recipient of syslog messages.
SourceLabs includes the ability to capture, sort, search and correlate Syslog messages with millions of records as part of its Self-Support Suite for Linux and Open Source Java
License:GPL: del.icio.us tag/gpl
Application
Security
linux
logging
monitoring
imported
License:GPL
opensource: del.icio.us tag/opensource
Software
Database
linux
logging
filesystem
monitoring
opensource