[rsyslog] sending logs outside /etc/rsyslog.conf to remote server

[david at lang.hm]

On Thu, 1 Oct 2009, Israel Garcia wrote:

> On 9/30/09, david at lang.hm <david at lang.hm> wrote:
>> On Wed, 30 Sep 2009, Israel Garcia wrote:
>>
>>> I've some daemons with their logs not define in /etc/rsyslog.conf and
>>> files outside /var/log folder. I have a central rsyslog receiving logs
>>> from severral servers.
>>>
>>> My question is:
>>>
>>> How can setup rsyslog on clients to send these logs outside
>>> /etc/rsyslog.conf to the central rsyslog server? Is this possible?
>>
>> the first problem is to get the messages to rsyslog.
>>
>> if the applications don't have an option to log to syslog you can use the
>> imfile input module in rsyslog to read lines from the file and process
>> them.
>
> Hi David,
>
> Has  anybody on the list setup apache, proftpd, momgrel or any other
> daemon logs to forward to a centralized syslog  server? I'd appreciate
> your experiences.

I haven't done it yet, but this page makes it seem pretty easy to setup 
apache

http://www.oreillynet.com/pub/a/sysadmin/2006/10/12/httpd-syslog.html

I've had proftpd send things to syslog in the past (IIRC it was a trivial 
config option)

no expriance with mongrel

David Lang