<?xml version="1.0" encoding="UTF-8"?>

<rss version='2.0'
     xmlns:creativeCommons="http://backend.userland.com/creativeCommonsRssModule">
    <channel>
        <!-- This XML Feed shows details for the page Using Syslog information with SourceLabs Linux Self-Support -->
        <creativeCommons:license>http://creativecommons.org/licenses/by-sa/2.5/
          </creativeCommons:license>
        <title>Using Syslog information with SourceLabs Linux Self-Support</title>
        <description>&lt;p&gt;Below is documentation for using &lt;a rel=&quot;nofollow&quot; href=&quot;http://www.sourcelabs.com&quot;&gt;SourceLabs&lt;/a&gt; Self-Support Suite for &lt;a class=&quot;wikilink&quot; href=&quot;http://swik.net/Linux&quot;&gt;Linux&lt;/a&gt; and Open Source &lt;a class=&quot;wikilink&quot; href=&quot;http://swik.net/Java&quot;&gt;Java&lt;/a&gt; to gather, organize, and search Syslog messages.&lt;/p&gt;


	&lt;p&gt;You can setup syslog to connect to the relay.  In this release, we only support syslog over &lt;span class=&quot;caps&quot;&gt;UDP&lt;/span&gt;.  To set this up, you need to modify your syslogd config file.  Often this is in /etc/syslog.conf&lt;/p&gt;


	&lt;p&gt;To get started, you can add&lt;/p&gt;


	&lt;p&gt;&lt;strong&gt;.&lt;/strong&gt;                             @relayMachineName:4657&lt;/p&gt;


	&lt;p&gt;This will send all your syslog messages to a machine named relayMachineName over port 4657.  Port 4657 is the default port the relay listens to for Syslog &lt;span class=&quot;caps&quot;&gt;UDP&lt;/span&gt; messages.  You can change this in the relay’s property file. This properties file is located in the ‘conf’ directory of your relay installation (e.g. /opt/sourcelabs/relay/conf).&lt;/p&gt;


	&lt;p&gt;To filter the syslog messages sent to the relay, please read the syslog documentation or man pages for more information.&lt;/p&gt;


	&lt;p&gt;Syslog-ng:&lt;/p&gt;


	&lt;p&gt;You can also setup syslog-ng to use the relay.  For the current version of the relay, you will need to use &lt;span class=&quot;caps&quot;&gt;UDP&lt;/span&gt; logging to the relay instead of &lt;span class=&quot;caps&quot;&gt;TCP&lt;/span&gt;.  To set this up, you need to modify your syslog-ng config file.  Often this is in /etc/syslog-ng.conf&lt;/p&gt;


To get started, you can add&lt;br&gt;
&lt;code&gt;
destination d_relay { udp(&quot;relayMachineName &quot;, port(4657)); };
log { source(s_sys); destination(d_relay); };
&lt;/code&gt;

	&lt;p&gt;Assuming that you are using a default syslog-ng configuration where source ‘s_sys’ represents all syslog messages (modify source as necessary for  your configuration),this will send all your syslog messages to a machine named relayMachineName over port 4657.  Port 4657 is the default port the relay listens to for Syslog &lt;span class=&quot;caps&quot;&gt;UDP&lt;/span&gt; messages.  You can change this in the relay’s property file. This properties file is located in the ‘conf’ directory of your relay installation (e.g. /opt/sourcelabs/relay/conf).&lt;/p&gt;


	&lt;p&gt;To filter the syslog messages sent to the relay, please read the syslog documentation or man pages for more information.&lt;/p&gt;


	&lt;p&gt;Find more &lt;a rel=&quot;nofollow&quot; href=&quot;http://www.sourcelabs.com&quot;&gt;information about SourceLabs Self-Support Suite for LInux and Open Source Java&lt;/a&gt;&lt;/p&gt;
</description>
                <category>linux</category>
        <category>centos</category>
        <category>RedHat</category>
        <category>syslog</category>
        <category>SuSE</category>
        <category>SourceLabs</category>
        <category>logging</category>
        <category>Ubuntu</category>
        <category>Debian</category>
        <category>support</category>

        <pubDate>Mon, 24 Mar 2008 12:31:39 -0700</pubDate>
        <lastBuildDate>Tue, 25 Mar 2008 10:28:43 -0700</lastBuildDate>
            
    </channel>
</rss>
