- 论坛徽章:
- 0
|
syslog-ng已经做好,已经加入了windows的机器,如何修改配置文件才能把netscreen和cisco等网络设备加到syslog-ng上,一下是我的syslog-ng.conf配置文件,请问如何修改呢?
# syslog-ng configuration file.
#
# This should behave pretty much like the original syslog on RedHat. But
# it could be configured a lot smarter.
#
# See syslog-ng( and syslog-ng.conf(5) for more information.
#
# 20000925 gb@sysfive.com
#
# Updated by Frank Crawford (<Frank.Crawford@ac3.com.au> - 10 Aug 2002
# - for Red Hat 7.3
# - totally do away with klogd
# - add message "kernel:" as is done with klogd.
#
# Updated by Frank Crawford (<Frank.Crawford@ac3.com.au> - 22 Aug 2002
# - use the log_prefix option as per Balazs Scheidler's email
#
options { sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (yes);
keep_hostname (yes);
};
source s_stream
{ unix-stream("/dev/log" ; };
source s_internal
{ internal(); };
source s_kernel
{ pipe("/proc/kmsg" log_prefix("kernel: " ); };
source remote { tcp(ip("10.3.5.17" port(514) keep-alive(yes)); };
source net { udp(); };
destination lpr { file("/var/log/lpr.log" ; };
destination mail { file("/var/log/mail.log" ; };
destination messages { file("/var/log/messages" ; };
destination console { usertty("root" ; };
destination mslog { file("/var/log/mslog.log" ;};
destination d_cisco { file("/var/log/cisco.log");};
#filter f_lpr { facility(lpr); };
#filter f_mail { facility(mail); };
#filter f_messages { level(info..emerg) and not facility(mail,lpr); };
#filter f_emergency { level(emerg); };
filter f_winauth { facility(local0); };
filter f_admin { match ("admin|Admin"); };
filter f_cisco { facility(local1); };
#log { source(src); filter(f_lpr); destination(lpr); };
#log { source(src); filter(f_mail); destination(mail); };
#log { source(src); filter(f_messages); destination(messages); };
#log { source(src); filter(f_emergency); destination(console); };
log { source(net); filter(f_winauth); filter (f_admin); destination(mslog);};
log { source(net); filter(f_winauth); destination(d_mysql);};
log { source(net); filter(f_cisco); destination(d_mysql);};
log { source(net); filter(f_cisco); destination(d_mysql);};
destination hosts { file("/var/log/HOSTS/$HOST/$FACILITY" owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes)); };
log { source(remote); destination(hosts); };
destination d_mysql {
pipe("/tmp/mysql.pipe"
template("INSERT INTO logs (host, facility, priority, level, tag, date, time, program, msg) VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY', '$HOUR MIN SEC', '$PROGRAM', '$MSG' );\n") template-escape(yes));
};
log { source(s_stream);
source(s_internal);
source(s_kernel);
source(remote);
source(net);
destination(d_mysql); }; |
|