Selecting wich log to send using rsyslog


(EL HIJAZI) #1

Hello to everyone !
1
Please i have a probléme with my rsyslog i can’t forward apach log i’m using ubuntu 14.04 and here is my config file : > >

> > #  /etc/rsyslog.conf	Configuration file for rsyslog.
> > #
> > #			For more information see
> > #			/usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
> > #
> > #  Default logging rules can be found in /etc/rsyslog.d/50-default.conf
> > 
> > 
> > #################
> > #### MODULES ####
> > #################
> > 
> > $ModLoad imuxsock # provides support for local system logging
> > $ModLoad imklog   # provides kernel logging support
> > #$ModLoad immark  # provides --MARK-- message capability
> > 
> > # provides UDP syslog reception
> > #$ModLoad imudp
> > #$UDPServerRun 514
> > 
> > # provides TCP syslog reception
> > #$ModLoad imtcp
> > #$InputTCPServerRun 514
> > 
> > # Enable non-kernel facility klog messages
> > $KLogPermitNonKernelFacility on
> > 
> > ###########################
> > #### GLOBAL DIRECTIVES ####
> > ###########################
> > 
> > #
> > # Use traditional timestamp format.
> > # To enable high precision timestamps, comment out the following line.
> > #
> > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
> > 
> > # Filter duplicated messages
> > $RepeatedMsgReduction on
> > 
> > #
> > # Set the default permissions for all log files.
> > #
> > $FileOwner syslog
> > $FileGroup adm
> > $FileCreateMode 0640
> > $DirCreateMode 0755
> > $Umask 0022
> > $PrivDropToUser syslog
> > $PrivDropToGroup syslog
> > 
> > #
> > # Where to place spool and state files
> > #
> > $WorkDirectory /var/spool/rsyslog
> > 
> > #
> > # Include all config files in /etc/rsyslog.d/
> > #
> > $IncludeConfig /etc/rsyslog.d/*.conf

And i can’t recive apach llog’s
here is the path of my apach log’s :
/var/log/apache2

2. and i feel that i m strugling t oselect what kind of log exactly should be allowd to pass by rsyslog :confused:
if some one has any good and EASY document please help


(system) #2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.