Syslog plugin

[euriska]

Anybody having trouble getting their plugin to bring up logs. I think mine is getting crushed from the sheer amount of data. Anyone have an example fof a suse linux box syslog-ng conf file. I have to capture certain events for SOX 404.

[nahun]

This is from Ubuntu, but they should be the same I would think.

Code: Select all

options {
        keep_hostname(yes);
        long_hostnames(off);
        sync(1);
        log_fifo_size(1024);
};

source src { unix-stream("/dev/log"); internal(); };

source net {
        udp();
        tcp();
};

destination d_mysql { pipe("/tmp/mysql.pipe" template("INSERT INTO syslog_incoming
(host, facility, priority, level, tag, date, time, program, msg)
VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC',
'$PROGRAM', '$MSG' );\n") template-escape(yes)); };

log { source(net); destination(d_mysql); };

http://vermeer.org/docs/1 is a great how-to