Re: [logs] Apache Logs revisited

From: Tom Perrine (tepat_private)
Date: Mon Feb 04 2002 - 10:56:29 PST

  • Next message: Nate Campi: "Re: [logs] NT Logs"

    >>>>> On Mon, 04 Feb 2002 07:00:13 -0800, Roy <royharat_private> said:
    
        Roy> Is there a way to just send just the Apache error logs to the remote log 
        Roy> server and still keep it local as well.? I got some great if not 
        Roy> overwhelming response to my initial question, then as the discussion 
        Roy> developed I realized I didn't want the overhead of the access logs since 
        Roy> I'm really interested in the security aspect of things.
    
    One way, off the top of my head, is to use the apache httpd.conf to
    send the logs you want to syslog, with a unique service, e.g. LOCAL4.
    
    Then in your local /etc/syslog.conf file, send LOCAL4.* to both a
    local file and a loghost.
    
    --tep
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    



    This archive was generated by hypermail 2b30 : Mon Feb 04 2002 - 11:40:04 PST