Stack Overflow
Stack Overflow

Questions tagged [syslog-ng]

The syslog-ng application is a flexible and highly scalable system logging application that is ideal for creating centralized and trusted logging solutions.

The syslog-ng application is a flexible and highly scalable system logging application that is ideal for creating centralized and trusted logging solutions. The main features of syslog-ng are summarized below.

  • Reliable log transfer: The syslog-ng application enables you to send the log messages of your hosts to remote servers using the latest protocol standards. The logs of different servers can be collected and stored centrally on dedicated log servers. Transferring log messages using the TCP protocol ensures that no messages are lost.
  • Secure logging using TLS: Log messages may contain sensitive information that should not be accessed by third parties. Therefore, syslog-ng supports the Transport Layer Security (TLS) protocol to encrypt the communication. TLS also allows the mutual authentication of the host and the server using X.509 certificates.
  • Direct database access: Storing your log messages in a database allows you to easily search and query the messages and interoperate with log analyzing applications. The syslog-ng application supports the following databases: MSSQL, MySQL, Oracle, PostgreSQL, and SQLite.
  • Heterogeneous environments: The syslog-ng application is the ideal choice to collect logs in massively heterogeneous environments using several different operating systems and hardware platforms, including Linux, Unix, BSD, Sun Solaris, HP-UX, Tru64, and AIX.
  • Filter and classify: The syslog-ng application can sort the incoming log messages based on their content and various parameters like the source host, application, and priority. Directories, files, and database tables can be created dynamically using macros. Complex filtering using regular expressions and boolean operators offers almost unlimited flexibility to forward only the important log messages to the selected destinations.
  • Parse and rewrite: The syslog-ng application can segment log messages to named fields or columns, and also modify the values of these fields.
  • IPv4 and IPv6 support: The syslog-ng application can operate in both IPv4 and IPv6 network environments; it can receive and send messages to both types of networks.
275 questions
0
votes
1 answer

Collecting logs from hardware devices and application software using syslog-ng

I need to collect logs from devices like Firewall, printers, routers, switches, proxy-servers, mail-servers, db-server, anti-virus software and other softwares for both Linux and Windows platform. Will I be able to do that with any single…
Debashisenator
  • 1,621
  • 4
  • 17
  • 16
0
votes
0 answers

MySQL Interval 1 Second Not Working

I'm sending syslog-ng to Percona. I have different logging sources filtered into different MySQL tables. I'm trying to determine the number of logs per second, minute and hour. This is how the table was created: CREATE TABLE syslog.switchlogs ( …
Jade Rampulla
  • 1
  • 1
0
votes
0 answers

Syslog-NG patternDB for Sophos Firewall

I'm currently trying to create a Pattern for the Firewall log of our Sophos Firewall. I came up with this: …
M.Reichardt
  • 1
0
votes
1 answer

How to create dynamic columns (MACROS) in Syslog-ng csv-parser

My application is writing message in to syslog-ng and syslog-ng is storing this message in to SQlite by separating the incoming message in to different columns. My application log legend looks like : unique-record-id usename date Quantity BOQ…
Ramkee
  • 900
  • 1
  • 10
  • 27
0
votes
1 answer

Is posible get the UUID from a log using syslog-ng?

I have my logs centralized into a syslog and I want to obtain the UUID from the coming log to save it into a database. Is this possible? The log message looks like this: Mar 28 14:14:26 172.17.42.1 1 2016-03-28T08:14:26.912-03:00 0e40cd94516b…
Rys
  • 4,934
  • 8
  • 21
  • 37
0
votes
1 answer

IP instead of hostname

In logs from syslog clients I got hostname field. How can I force syslog-ng to put there IP addres instead hostname? It's only thing I want to change, don't want to be forced to make full message template if possible. I need to do this on Linux…
akuzma
  • 1,592
  • 6
  • 22
  • 49
0
votes
1 answer

syslog-ng with chained certificates

I have a set up as follows: Root CA-> Intermediate CA -> Client Cert and Server Cert. On the client side I have a directory containing client.crt, client.key, and a symbolic hash link to chain.crt. chain.crt contains the intermediate cert followed…
alien35man
  • 11
  • 4
0
votes
1 answer

How can I configure an index pattern?

I have a system using several docker images logging into a syslog-ng. Syslog-ng is configured to write into files all the streams camming from the other containers. This part works well and I am getting logs like that: 2016-01-04T20:28:38+03:00…
Rys
  • 4,934
  • 8
  • 21
  • 37
0
votes
1 answer

Can I use a more advanced template for extracting $PROGRAM in syslog-ng?

I am sending messages to Syslog using two Apache SyslogAppenders in Java. My ConversionPatterns are: Instance-${jboss.server.name}: %d %-5p [%c] (%t) %m%n Application-MyApp: ${jboss.server.name} - %d %-5p [%c] (%t) %m%n I then have different Log4J…
Rich
  • 15,602
  • 15
  • 79
  • 126
0
votes
1 answer

mysql queries before insert operation by syslog-ng

I am using syslog-ng to parse some logs that I am receiving via a csv-parser. However, I want to achieve insert operations that are a bit more complex than the conventional insert using the "destination" option in syslog-ng. Currently, my…
bawse
  • 201
  • 3
  • 13
0
votes
1 answer

Access to timestamp in C - syslog ng

I'm working on a C project, with client/server syslog communication with a Rpi. I have been asked to use syslog ng and I'd like to access to timestamp. From what I found here: Where the timestamp comes from depends on the type of log data you’re…
Arhyaa
  • 369
  • 1
  • 3
  • 21
0
votes
2 answers

Syslog format and syslog-ng filters

I can not understand what I'm missing in this syslog-ng filter. First of all this is the log message: <22>Nov 3 09:57:44 logon avaya: 2015/11/03 09:57:44,00:00:01,1,0,103456456156,I,#AA:Poa,1231231123231,,0,1017121,0,T9002,Line 2.1,V9542,VM Channel…
Tobia
  • 9,165
  • 28
  • 114
  • 219
0
votes
1 answer

How to decipher traffic from syslog-ng to syslog

I have a centralized syslog-ng system that is taking in feeds from various servers, and putting it into storage. Fortunately, I was forward thinking and I have each system coming in on its own port, which helps me delineate which traffic is…
jasonmclose
  • 1,667
  • 4
  • 22
  • 38
0
votes
1 answer

How can I separate logs based on source IP or hostname behind NAT using syslog-ng?

I would like to create a centralized logging using syslog-ng. I have to cover multiple offices with 1-2 public IPs and multiple other servers/devices running "in the cloud". Just for the cloud servers everything working OK, but when I am want to…
itoperatorguy
  • 1
  • 2
0
votes
1 answer

How to setup syslog-ng with option TLS

anyone knows how to setup TLS option in syslog-ng in Centos 6.x? I do have following syslog-ng.conf and it works just fine but when I add tls option it does not? syslog-nf-.conf # My Switches source s_switch { …
user2912312
  • 155
  • 1
  • 3
  • 13
1 2 3
…
18 19