syslog-ng üzerine çalışmalar

Syslog-NG ile ilgilit testler yapma isteği belirdi içimde birden. Oturup biraz inceledim.

Solaris x86 platformunda syslog-ng kurmak isteyenler aşağıdaki adresten paketi temin edebilirler :
ftp://ftp.sunfreeware.com/pub/freeware/intel/10/syslogng-3.1.2-sol10-x86-local.gz

Paketin bağımlılıkları için aşağıdaki ek paketlere gerek var :


-rw-r--r--   1      20865 Mar  4 13:34 eventlog-0.2.12-sol10-x86-local.gz
-rw-r--r--   1    6795158 Mar  4 14:31 glib-2.25.13-sol10-x86-local.gz
-rw-r--r--   1     526342 Mar  4 13:36 libgcc-3.4.6-sol10-x86-local.gz
-rw-r--r--   1    1488704 Mar  4 14:44 libiconv-1.13.1-sol10-x86-local.gz
-rw-r--r--   1     114680 Mar  4 13:35 libintl-3.4.0-sol10-x86-local.gz
-rw-r--r--   1    4399772 Mar  4 13:36 openssl-1.0.0d-sol10-x86-local.gz
-rw-r--r--   1    1200185 Mar  4 13:36 pcre-8.12-sol10-x86-local.gz
-rw-r--r--   1    424200 Mar  4 13:33 syslogng-3.1.2-sol10-x86-local.gz
-rw-r--r--   1     585896 Mar  4 13:35 zlib-1.2.5-sol10-x86-local.gz



Solaris istemci örnek konfig dosyası


@version:3.0


options {
};


# sources


source s_local {


# SYslog-ng tarafindan uretilen mesajlar.
internal();
# Solaris stream mesajlar
sun-streams("/dev/log" door("/etc/.syslog_door"));
};


# destinations
destination d_tcp {
                tcp("192.168.1.1");
        };


log {
source(s_local);
destination(d_tcp);
};

Linux Sunucu için örnek konfig dosyası



@version: 3.2
#Default configuration file for syslog-ng.
#
# For a description of syslog-ng configuration file directives, please read
# the syslog-ng Administrator's guide at:
#
# http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/bk01-toc.html
#


options {
                dns_cache(2000);
                dns_cache_expire(87600);
                use_dns(yes);
};


# sources
source s_local {
# message generated by Syslog-NG
internal();
# standard Linux log source (this is the default place for the syslog()
# function to send logs to)
unix-stream("/dev/log");
# messages from the kernel
file("/proc/kmsg" program_override("kernel"));


};


source s_net {
udp();
tcp();
syslog();
};




######
# destinations
destination d_messages { file("/var/log/messages"); };
destination d_iTop { file("/var/log/itop.deneme.local"); };


log {
source(s_local);
destination(d_messages);
source(s_net);
destination(d_iTop);
};