RE: Better Syslog server
[email protected] (Rex Monty di Bona)
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Message-ID | <[email protected]> |
One thing to note with the provided syslog server is that you can direct messages to a
local script. This allows easy parsing of the selected messages (all if desired)
without replacing syslog. Nice if you are afraid of patches etc.
Steps are:
create a named pipe:
# mknod /etc/syslog_pipe p
run the following script (or one like it) on the pipe:
#!/bin/sh
while :
do
while read message
do
echo message is $message
done < /etc/syslog_pipe
echo syslog restarted
done
and add the appropriate lines to /etc/syslog.conf:
*.debug /etc/syslog_pipe