Re: [logs] Central log server for Apache and qmail log files

Previous message: David Lynum: "[logs] Central log server for Apache and qmail log files"
In reply to: David Lynum: "[logs] Central log server for Apache and qmail log files"
Next in thread: Mike Blomgren: "RE: [logs] Central log server for Apache and qmail log files"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

rmarty@private

> I'm setting up a central log server.  My question concerns modifying 
> the syslog.conf file for both the client and central log servers.  I 
> want to monitor apache access and error logs, as well as qmail and 
> qmail scanner log files.  I'm new to setting up syslog servers, so I 
> need some help.  By doing searchs on google I know, in general, how 
> to setup both the client and central log servers.  I just can't 
> figure out how to specifically log apache/qmail/qmail-scanner logs.

You can log into syslog out of apache with:

ErrorLog "| /usr/bin/logger -t 'apache_error_log' "
CustomLog "| /usr/bin/logger -t 'apache_access_log' combined"

In the latest apache there is also a possibility to do it directly:

ErrorLog syslog:user

Hope this helps

	-raffy

-- 

Raffael Marty, CISSP                          raffael.marty@private
Senior Security Engineer                    Content Team @ ArcSight Inc.
1309 South Mary Ave.         Sunnyvale, CA 94087          (408) 328 5562
_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis