syslog2logan/README.md
2010-03-17 13:27:28 +01:00

87 lines
1.6 KiB
Markdown

Dependencies
============
System
------
* ruby >= 1.9 (tested: 1.9.1, untested: 1.8 (maybe compatible))
* libdb >= 4.7 (tested: 4.7/4.8)
* C-Compiler (tested: gcc 4.4.1)
### Debian/Ubuntu:
# aptitude ruby1.9.1 ruby1.9.1-dev libdb4.7-dev rubygems1.9.1
If you've installed ruby1.8 (yet), you should run ruby1.9.1 instead ruby and
gem1.9.1 instead gem.
Change shebash in s2l.rb to
#!/usr/bin/ruby1.9.1
or
#!/usr/bin/env ruby1.9.1
Ruby Gems
---------
You should install *dk-bdb* manualy:
# gem install dk-bdb -- --with-db-dir=/usr --with-db-include=/usr/include
Every other dependencies will be installed automaticaly,
if you install syslog2logan via gem.
Install
=======
# gem install syslog2logan
Usage
=====
First you should know, the database environments are in *this* directory,
where you call *s2l.rb*. You must use this directory for logan itself too!
Don't use this directory for anything else.
Start
-----
Simple on Ubuntu:
# /var/lib/gems/1.9*/gems/syslog2logan-*/bin/s2l.rb
Deamonized:
# sh -c 'nohup PATHTO/s2l.rb </dev/null >/dev/null 2>&1 &' &
Use it
------
Your Syslog-server should send everythin via tcp to port 1514.
UDP and TLS aren't possible yet.
If you want to use any of these, you can proxy it via a local syslog-ng.
### syslog-ng
You need these lines:
source s_server {
unix-stream( "/dev/log" max-connections(100));
# internal(); # Statistics about dests. It's unimportant for LogAn.
file( "/proc/kmsg");
};
destination d_server {
tcp( "SyslogServer.example.org" port (1514));
};
log {
source( s_server);
destination( d_server);
};
### rsyslog
I don't know. Please tell me, how to use.