Sending all apache logs to Syslog Server Post: 302387228

Sponsored Content

Operating Systems Linux Red Hat Sending all apache logs to Syslog Server Post 302387228 by sidhurana on Friday 15th of January 2010 01:30:39 AM

01-15-2010

Registered User

Sending all apache logs to Syslog Server

Hi All,

I need to send all apache logs to local syslog and then to syslog server (STRM – Security Threat response manager).

I follow these steps:-

vi /etc/httpd/conf/httpd.conf

Added these lines :-

ErrorLog syslog:local1
LogLevel notice

Then in syslog.conf:-

local1.crit /var/log/httpd/access.log

local1.* @192.168.1.1 (IP of syslog server)

killall -HUP syslogd
httpd restart.

Now apache logs are showing in remote syslog server. But the issue is I am getting only "notice" from apache i.e stopping and starting httpd services and nothing else.

I need all apache logs (i.e if someone clicked on the site then all logs should be send to syslog server and not only httpd restarting services)

I may need to set LogLevel in httpd.conf to redirect all access logs to syslog server.

Please suggest as I need to log 3 or more files includes modsecurity, error log , tomcat logs to syslog server.. Need to redirect all logs to syslog server.

Please suggest...

Thanks,
Sudhir

sidhurana

View Public Profile for sidhurana

Find all posts by sidhurana

6 More Discussions You Might Find Interesting

1. Linux

sending messages from auditd logs to syslog server

I have the auditd running and I need to send the audit logs to a remote syslog server. Anyideas on how to do that?

2. UNIX for Advanced & Expert Users

howto dump CFTOKEN and CFID in apache logs

hi folks, Can you help me how to dump CFTOKEN and CFID requests in apache access_log ? can you give me a better idea how to accomplish this ? thanks

3. Shell Programming and Scripting

Perl: Sending file from UNIX server to Windows server

I'm trying to write a Perl script where a file from a UNIX server box connects to a Windows server box and copies that file into the Window box. The main problem I have right now is that whenever I try to connect to the Windows box, the connection is refused. The error message that always pops...

4. Programming

Problem with Perl script after moving from a Windows/Apache Server to a UNIX server.

I have a Perl script that worked fine before moving it to justhost.com. It was on a Windows/Apache server. Just host is using UNIX. Other Perl scripts on other sites that were also moved work fine so I know Perl is functioning. The script is called cwrmail.pl and is located in my cgi-bin. When I...

5. AIX

Apache logs

Hi, I can't seem to find the apache logs in my system. Can anyone assist me on finding them? This was done with a RPM install. I've checked everywhere and even tried a find command with key names like httpd and apache. and i've come up with nothing except my conf files.

6. Linux

How to push Tomcat logs to remote syslog server?

I found a script for automatically push tomcat logs to syslog server which is locate in same server. How do I change it to push logs to remote server? log4j.rootLogger=INFO, WARN, console, file, SYSLOG log4j.appender.file=org.apache.log4j.RollingFileAppender log4j.appender.file.append=true...

LEARN ABOUT DEBIAN

runapp::apache

RunApp::Apache(3pm)					User Contributed Perl Documentation				       RunApp::Apache(3pm)

NAME

       RunApp::Apache - Apache control for RunApp

SYNOPSIS

	use RunApp::Apache;

	$apache = RunApp::Apache->new
		   (root => "/tmp/apache_run",
		    report => 1,
		    apxs => '/usr/local/sbin/apxs',
		    # httpd => '/usr/local/sbin/httpd',
		    required_modules => ["log_config", "alias", "perl", "mime"],
		    config_block => q{
	[% IF AP_VERSION == 2 %]
	 eval { use Apache2 };
	 eval { use Apache::compat };
	[% END %]

	<Location /myapp>
	 AllowOverride None
	 SetHandler perl-script
	 PerlSetVar approot [% cwd %]
	 PerlHandler MyApp
	 Options +ExecCGI
	</Location>
	});

DESCRIPTION

       This is the class for defining a apache web server to be used in RunApp.

CONSTRUCTOR

       new (%arg)

       Required arg:

       root
	   The root for the apache instance.

       apxs
       httpd
	   If "apxs" is specified, "httpd" will be derived from it.

       required_modules
	   A arrayref to the apache modules required.

       config_block
	   The config block that will be the extra block in the template used by RunApp::Template::Apache.

       CTL The class for handling apachectl.  The default is RunApp::Control::AppControl.  You can also use RunApp::Control::ApacheCtl.

       CONF
	   The class for handling apache config.  The default is RunApp::Template::Apache.  It is used in the "build" phase of RunApp

SEE ALSO

       RunApp, RunApp::Control::Apache, RunApp::Template::Apache, App::Control

AUTHORS

       Chia-liang Kao <clkao@clkao.org>

       Refactored from works by Leon Brocard <acme@astray.com> and Tom Insam <tinsam@fotango.com>.

COPYRIGHT

       Copyright (C) 2002-5, Fotango Ltd.

       This module is free software; you can redistribute it or modify it under the same terms as Perl itself.

perl v5.8.8							    2008-01-09						       RunApp::Apache(3pm)