Aug 16, 2011
tom

Apache Remote Logging

Question

I am investigating the possibility of logging Apache access & error_logs into one central repository, as opposed to each server having their own log files.

Does anyone have any ideas or best practises on how to do this? Anyone can push me in the right direction?

Steve

Answer

You can use rsyslog, see http://wiki.rsyslog.com/index.php/Working_Apache_and_Rsyslog_configuration

To log everything to a remote server put in /etc/rsyslog.d/0X-remote-server.conf:

*.* @<IP-address remote server>

Then on the remote server you can use for instance syslog-ng with filters to put
all logging in seperate directories (i.e. per VirtualHost).

If you log over the network it’s wise to encrypt your data. You can use stunnel for this
(http://www.stunnel.org/).

Related posts:

  1. Filtering bad requests from Apache -> logger -> rsyslog to syslog-ng on a remote logging server possible?
  2. Need logging system software
  3. Determine which programs are logging to a specific syslog facility
  4. Log remote username when logging into RDP
  5. Remote Desktop Connection Logging Off

Leave a comment