<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Thanks that seems to be a push in the right direction<br>
<br>
BUT :)<br>
<br>
confirmed syslog server working <br>
can recieve test from other machines using nc -w0 -u 192.168.0.1 514
<<< "testing again from my home machine"<br>
<pre>all machine and server firewalls disabled while trying to resolve
only abnormal issue is
</pre>
rsyslogd-2039: Could no open output pipe '/dev/xconsole' [try
<a class="moz-txt-link-freetext" href="http://www.rsyslog.com/e/2039">http://www.rsyslog.com/e/2039</a> ]<br>
<br>
which seems to been an ongoing issue for the last few ubuntu's<br>
<br>
newer rsyslog <a
href="https://launchpad.net/ubuntu/+source/rsyslog/5.8.1-1ubuntu1">5.8.1-1ubuntu1
</a>only available <a
href="https://launchpad.net/ubuntu/oneiric/+source/rsyslog">The
Oneiric Ocelot</a> (active development) <br>
<br>
does this seem to be the issue (and maybe i'll try building newer
rsyslog<br>
<br>
or issue somewhere else that I might be missing??<br>
<br>
<br>
Thanks anyway<br>
<br>
<br>
<br>
On 22/06/11 18:21, Adrian Woodley wrote:
<blockquote cite="mid:4E01C22B.1010303@Diskworld.com.au" type="cite">Most
syslog packages, including rsyslog which is the default on Ubuntu,
will do logging via TCP/UDP.
<br>
<br>
On your receiving box, edit /etc/rsyslog.conf and uncomment:
<br>
<br>
$ModLoad imudp
<br>
$UDPServerRun 514
<br>
<br>
$ModLoad imtcp
<br>
$InputTCPServerRun 514
<br>
<br>
On your log generating boxes, create /etc/rsyslog.d/10-remote:
<br>
*.* @@<ip.of.log.server>:514;SyslFormat
<br>
<br>
From there you could use something like Splunk
(htp://www.splunk.com/) to interrogate and display your logs. (I
believe there's a free version, with a volume limit on the amount
of logs to be processed a day). Patrick Coleman knows heaps about
Splunk and will probably jump on here shortly to evangelise it.
<br>
<br>
I've also come across Adiscon Log Analyzer
(<a class="moz-txt-link-freetext" href="http://loganalyzer.adiscon.com/">http://loganalyzer.adiscon.com/</a>), while looking on the
rsyslog.com page. I haven't used it, but the demo page looks
interesting. It also has a free download.
<br>
<br>
If you give either of these products a go, let us know how you get
on and what you think.
<br>
<br>
Cheers,
<br>
<br>
Adrian
<br>
<br>
On 06/22/2011 05:20 PM, wolfbite wrote:
<br>
<blockquote type="cite">be gentle with me and dont make my head
hurt too much :)
<br>
<br>
I have multiple computers connected to my network
<br>
I've setup a OLD computer and screen to be an information
computer (computer & screen perm on)
<br>
<br>
I currently have it running with
<br>
ubuntu maverick
<br>
xorg openbox
<br>
conky clock
<br>
conky wearther
<br>
conky googlecalendar (love conky :)
<br>
<br>
looking at displaying syslog & such from multiple computers
(local already ok)
<br>
<br>
what I want is a SIMPLE :) system where I can send syslogs or
other data from any computer to monitor computer.
<br>
I dont want the info going external (ie out via isp then back,
security &spam reasons)
<br>
but I would like to keep it simple without maintaining a full
blown mail server etc.
<br>
<br>
seems like theres LOTS of ways but seem quit convoluted
<br>
looked at offlineimap, postfix, exim, etc and my brain is
glazing over
<br>
<br>
any pointing into the right direction appreciated
<br>
<br>
Thanks
<br>
_______________________________________________
<br>
PLUG discussion list: <a class="moz-txt-link-abbreviated" href="mailto:plug@plug.org.au">plug@plug.org.au</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.plug.org.au/mailman/listinfo/plug">http://lists.plug.org.au/mailman/listinfo/plug</a>
<br>
Committee e-mail: <a class="moz-txt-link-abbreviated" href="mailto:committee@plug.linux.org.au">committee@plug.linux.org.au</a>
<br>
</blockquote>
<br>
_______________________________________________
<br>
PLUG discussion list: <a class="moz-txt-link-abbreviated" href="mailto:plug@plug.org.au">plug@plug.org.au</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.plug.org.au/mailman/listinfo/plug">http://lists.plug.org.au/mailman/listinfo/plug</a>
<br>
Committee e-mail: <a class="moz-txt-link-abbreviated" href="mailto:committee@plug.linux.org.au">committee@plug.linux.org.au</a>
<br>
<br>
</blockquote>
<br>
</body>
</html>