Remote Syslog

[Steffen Kluge]

On Wed, 2005-05-25 at 14:03 -0400, Tim Holmes wrote:
> #send messages from Lancelot to Lancelot.log
> 192.168.0.225.*		/var/log/lancelot.log

Plain old syslog doesn't support this. The LHS has to be
<log_facility>.<log_level>. Syslog-ng is far more flexible in this
respect, you may want to check it out.

If you want/need to stick to syslog, the traditional approach is
configuring your log sources to use different facilities that aren't
used anywhere else, and sort them into different log files using
syslog.conf. This clearly doesn't scale very well, since you usually
only have the facilities local0 to local7 at your disposal. But with
just two log sources, as in your example, it would work well.

Another approach is having syslog write it all into one big file, and
running one or more "tail --follow=name" style listeners on that file,
that grep on content (e.g. the 4th word) and write specific log files.

Cheers
Steffen.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20050526/6eabb8c5/attachment-0002.bin