[CentOS] Remote-logging nginx? (or other non-syslog-enabled stuff)

Thu Mar 24 21:50:08 UTC 2011
Lamar Owen <lowen at pari.edu>

On Thursday, March 24, 2011 05:37:41 pm Dr. Ed Morbius wrote:
> on 17:14 Thu 24 Mar, Lamar Owen (lowen at pari.edu) wrote:
> > Prior to PostgreSQL supporting syslog I used [logger] to
> > pipe PostgreSQL output to syslog.  Worked fine.

> I haven't, looking at it.

It is one option that is definitely in vanilla CentOS.

> OK.  Any pointers on configuration are greatly appreciated.  Docs, etc.

Whew.  Large scale remote syslog operation is a large subject; I've never had anything large-enough scale to need more than logwatch or site-grown scripts to do processing.  The biggest thing to do is set up NTP and have three reference time sources (three so that if one is wrong you know which one).  Otherwise, log correlation is impossible.
 
> Yeah, we're aware of that (I mentioned this in my first post to the
> thread).

Yep, that you did.

> We've got a locally-compiled version of nginx, so patching isn't out of
> the question.  Just looking at all our options.

While CentOS doesn't provide nginx itself, it does provide tools for dealing with logs; I saw several things doing a 'yum list | grep log' (I know there's easier ways of doing that; that's just the way I prefer to go about it).  Also try grepping a yum list for 'watch' as I remember some logwatching stuff.....