OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[suse-security] syslog, syslog-ng und logserver

From: Markus Feilner (listsfeilner-it.net)
Date: Wed Jan 12 2005 - 12:57:34 CST


Hello List,
can you give me a hint: I have a Linux Backup Server (NAS) running Samba
and I want to transfer my logfiles to another Linux host.

It's Easy, but not satisfying with old syslog: I get all the messages in
the syslog file of the Linux Loghost.

I read that syslog-ng might be the best way for me:
I want to build a log Server with one directory per host and separate
files in these corresponding the services. like:
/var/log/NAS/messages
/var/log/NAS/warn
/var/log/NAS/mail
/var/log/NAS/samba/log.smbd
/var/log/NAS/samba/log.nmbd

and for our proxy:
/var/log/PROXY/messages
...
/var/log/squid/access.log
...

4 Questions:
Is this setup possible?
Do I need to setup syslog-ng on all Clients?
Does it make sense?
Does anybody have better recommendations?
Thanks a lot

--
Mit freundlichen Grüßen
Markus Feilner
---------------------------
Bitte beachten Sie unsere neuen Adressdaten! Vielen Dank.
---------------------------
Feilner IT Linux & GIS
Linux Solutions, Training, Seminare und Workshops - auch Inhouse
Beraiterweg 4 93047 Regensburg
fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092
mail mfeilnerfeilner-it.net web http://www.feilner-it.net

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here