remote syslog

We are looking into setting up a separate syslog server. We have been able
to push the syslogs to one server, but it is messy and unruly.
1. Can you set on on the host server to:
a) keep a copy of the syslog and...
b) also send it to the remote server.

2. Instead of the syslog treating all incoming messages as local, there for
creating one huge syslog that contains multiple servers. I would like to set
it up so they each have there own file.
server1.messages
server2.messages
etc.

Is there a pkg that can do all this.
We would like to incorporate windows and HP later on.

> We are looking into setting up a separate syslog server. We have been able
> to push the syslogs to one server, but it is messy and unruly.
> 1. Can you set on on the host server to:
> a) keep a copy of the syslog and...
> b) also send it to the remote server.

Well, of course, since a single message can be sent to several
syslog destinations.

> 2. Instead of the syslog treating all incoming messages as local, there for
> creating one huge syslog that contains multiple servers. I would like to set
> it up so they each have there own file.
> server1.messages
> server2.messages
> etc.

IIRC syslog-ng can do that,


Stefan

Yeah you can do all this with syslog-ng

http://freshmeat.net/projects/syslog-ng/






+-------------------------------+---------------------------------------+
| leon kyneur | email : (E-Mail Removed) |
| technical monkey | icq : 13198110 |
+-------------------------------+---------------------------------------+
| "Which is worse : ignorance or apathy? Who knows? Who cares?" |
+-----------------------------------------------------------------------+
| gpg fingerprint : BE0E 19A3 865C 277D 3071 A1FB A9F0 815E E240 F00C |
+-----------------------------------------------------------------------+

On Thu, 21 Oct 2004, LHradowy wrote:

> We are looking into setting up a separate syslog server. We have been able
> to push the syslogs to one server, but it is messy and unruly.
> 1. Can you set on on the host server to:
> a) keep a copy of the syslog and...
> b) also send it to the remote server.
>
> 2. Instead of the syslog treating all incoming messages as local, there for
> creating one huge syslog that contains multiple servers. I would like to set
> it up so they each have there own file.
> server1.messages
> server2.messages
> etc.
>
> Is there a pkg that can do all this.
> We would like to incorporate windows and HP later on.
>
>
>