input application logs to NLS and forwarding to a storage

[lukedevon]

Hi,

I have few linux nodes which are generating thier own application logs.
Log types are more likely to apache/tomcat but quite customized.

1. How can I input such application logs to NLS? I have tested syslog sending to NLS but I want to send these application logs too.

2. I want send those logs to NLS and while sending those logs to NLS, I wanna send them to another centralized log repository. Requirement is, I wanna send those logs to the central log repo without changing the log's source info. (IPs and stuff)

Is there a guide in NLS? can somebody help me please?

Thanks in advance,
Luke.

[syang]

Hello Luke,

I can help assist you with this.

1. You can use syslogs to send custom logs. Here is the link. Please edit the ip address with your log server's to set up log files to NLS: http://ip-address-of-log-server/nagiosl ... inux-files

2. I recommend configuring the linux server to send to two locations: one to NLS and the centralized log repo. Go into the /etc/rsyslog.d folder and edit the log file you are interested in sending
to the other repo by adding another @@server2 below the NLS:

Code: Select all

if $programname == 'log name' then @@server2

The log name and @@server2 should be entered with your information.

Please let me know if this works.
Thanks!

[lukedevon]

Hi Syang,

Thank you so much for the help. I will try your guide and get back to you ASAP.

Regards
Luke.

[cdienger]

Let us know once you've had a chance to test