{"id":803,"date":"2017-09-15T01:39:50","date_gmt":"2017-09-14T18:39:50","guid":{"rendered":"https:\/\/trichev.com\/blog\/?p=803"},"modified":"2017-09-15T01:39:50","modified_gmt":"2017-09-14T18:39:50","slug":"syslog-ng-on-centos-6","status":"publish","type":"post","link":"https:\/\/trichev.com\/blog\/2017\/09\/15\/syslog-ng-on-centos-6\/","title":{"rendered":"Syslog-ng on CentOS 6"},"content":{"rendered":"

Server side Syslog-ng installation<\/strong><\/p>\n

vi \/etc\/sysconfig\/iptables
\n-A INPUT -p tcp -m state --state NEW -m tcp --dport 514 -j ACCEPT
\n-A INPUT -p udp -m state --state NEW -m udp --dport 514 -j ACCEPT<\/code><\/p>\n

yum install epel-release
\nyum install syslog-ng syslog-ng-libdbi -y<\/code><\/p>\n

vi \/etc\/syslog-ng\/syslog-ng.conf<\/code><\/p>\n

@version:3.2\r\n\r\noptions {\r\nlong_hostnames(off);\r\nlog_msg_size(8192);\r\nflush_lines(1);\r\nlog_fifo_size(20480);\r\ntime_reopen(10);\r\n# use_dns(yes);\r\nuse_dns(no);\r\n# dns_cache(yes);\r\n# use_fqdn(yes);\r\nuse_fqdn(no);\r\nkeep_hostname(yes);\r\nchain_hostnames(no);\r\nperm(0644);\r\nstats_freq(43200);\r\n};<\/code><\/pre>\n
source s_internal { internal(); };\r\ndestination d_syslognglog { file(\"\/var\/log\/syslog-ng.log\"); };\r\nlog { source(s_internal); destination(d_syslognglog); };<\/code><\/pre>\n
source s_local {\r\nunix-dgram(\"\/dev\/log\");\r\nfile(\"\/proc\/kmsg\" program_override(\"kernel:\"));\r\n};<\/code><\/pre>\n
filter f_messages { level(info..emerg); };\r\nfilter f_secure   { facility(authpriv); };\r\nfilter f_mail     { facility(mail); };\r\nfilter f_cron     { facility(cron); };\r\nfilter f_emerg    { level(emerg); };\r\nfilter f_spooler  { level(crit..emerg) and facility(uucp, news); };\r\nfilter f_local7   { facility(local7); };<\/code><\/pre>\n
destination d_messages { file(\"\/var\/log\/messages\"); };\r\ndestination d_secure   { file(\"\/var\/log\/secure\"); };\r\ndestination d_maillog  { file(\"\/var\/log\/maillog\"); };\r\ndestination d_cron     { file(\"\/var\/log\/cron\"); };\r\ndestination d_console  { usertty(\"root\"); };\r\ndestination d_spooler  { file(\"\/var\/log\/spooler\"); };\r\ndestination d_bootlog  { file(\"\/var\/log\/demsg\"); };<\/code><\/pre>\n
log {source(s_local); filter(f_emerg);  destination(d_console); };\r\nlog {source(s_local); filter(f_secure); destination(d_secure); flags(final); };\r\nlog {source(s_local); filter(f_mail);   destination(d_maillog); flags(final); };\r\nlog {source(s_local); filter(f_cron);   destination(d_cron); flags(final); };\r\nlog {source(s_local); filter(f_spooler); destination(d_spooler); };\r\nlog {source(s_local); filter(f_local7); destination(d_bootlog); };\r\nlog {source(s_local); filter(f_messages); destination(d_messages); };<\/code><\/pre>\n
source s_remote {\r\ntcp(ip(0.0.0.0) port(514));\r\nudp(ip(0.0.0.0) port(514));\r\n};<\/code><\/pre>\n
destination r_console {file(\"\/var\/log\/syslog-ng\/$YEAR$MONTH$DAY\/$HOST\/console\" owner(\"root\") group(\"root\") perm(0640) dir_perm(0750) create_dirs(yes)); };<\/code><\/pre>\n
destination r_secure {file(\"\/var\/log\/syslog-ng\/$YEAR$MONTH$DAY\/$HOST\/secure\" owner(\"root\") group(\"root\") perm(0640) dir_perm(0750) create_dirs(yes)); };<\/code><\/pre>\n
destination r_cron {file(\"\/var\/log\/syslog-ng\/$YEAR$MONTH$DAY\/$HOST\/cron\" owner(\"root\") group(\"root\") perm(0640) dir_perm(0750) create_dirs(yes)); };<\/code><\/pre>\n
destination r_spooler {file(\"\/var\/log\/syslog-ng\/$YEAR$MONTH$DAY\/$HOST\/spooler\" owner(\"root\") group(\"root\") perm(0640) dir_perm(0750) create_dirs(yes)); };<\/code><\/pre>\n
destination r_bootlog {file(\"\/var\/log\/syslog-ng\/$YEAR$MONTH$DAY\/$HOST\/bootlog\" owner(\"root\") group(\"root\") perm(0640) dir_perm(0750) create_dirs(yes)); };<\/code><\/pre>\n
destination r_messages {file(\"\/var\/log\/syslog-ng\/$YEAR$MONTH$DAY\/$HOST\/messages\" owner(\"root\") group(\"root\") perm(0640) dir_perm(0750) create_dirs(yes)); };<\/code><\/pre>\n
log { source(s_remote); filter(f_emerg); destination(r_console); };\r\nlog { source(s_remote); filter(f_secure); destination(r_secure); flags(final); };\r\nlog { source(s_remote); filter(f_cron); destination(r_cron); flags(final); };\r\nlog { source(s_remote); filter(f_spooler); destination(r_spooler); };\r\nlog { source(s_remote); filter(f_local7); destination(r_bootlog); };\r\nlog { source(s_remote); filter(f_messages); destination(r_messages); };<\/code><\/pre>\n
mkdir \/var\/log\/syslog-ng
\nchkconfig rsyslog off
\nchkconfig --list rsyslog
\nchkconfig syslog-ng on
\nchkconfig --list syslog-ng
\nservice rsyslog stop
\nservice syslog-ng restart<\/code><\/p>\n
Client configuration<\/strong><\/p>\n
yum install epel-release -y<\/code>
\n#CentOS6
\nyum install syslog-ng syslog-ng-libdbi -y<\/code>
\nor
\n#CentOS5
\nyum install syslog-ng-y<\/code><\/p>\n
echo 'destination pnjsvmon01v {udp(\"192.168.1.60\" port(514));};' >> \/etc\/syslog-ng\/syslog-ng.conf\r\necho 'log { source(s_sys); destination(srvmon01v); };' >> \/etc\/syslog-ng\/syslog-ng.conf<\/code><\/pre>\n
#CentOS
\nchkconfig rsyslog off
\nchkconfig --list rsyslog
\nchkconfig syslog-ng on
\nchkconfig --list syslog-ng
\nservice rsyslog stop
\nservice syslog-ng restart<\/code>
\nor
\n#SLES11
\n\/etc\/init.d\/syslog restart<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"
Server side Syslog-ng installation vi \/etc\/sysconfig\/iptables -A INPUT -p tcp -m state –state NEW -m tcp –dport 514 -j ACCEPT -A INPUT -p udp -m state –state NEW -m udp –dport 514 -j ACCEPT yum install epel-release yum install syslog-ng syslog-ng-libdbi -y vi \/etc\/syslog-ng\/syslog-ng.conf @version:3.2 options { long_hostnames(off); log_msg_size(8192); flush_lines(1); log_fifo_size(20480); time_reopen(10); # use_dns(yes); use_dns(no); […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[231],"tags":[32,245,246,14,11],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/803"}],"collection":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/comments?post=803"}],"version-history":[{"count":1,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/803\/revisions"}],"predecessor-version":[{"id":804,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/803\/revisions\/804"}],"wp:attachment":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/media?parent=803"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/categories?post=803"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/tags?post=803"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}