Filtering bad requests from Apache -> logger -> rsyslog to syslog-ng on a remote logging server possible?
- by zeyus
EDIT: Thanks for the help
Here is a quick idea of the setup:
webserver X
In apache httpd.conf:
LogFormat "%v %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" vcombined
CustomLog "|/usr/bin/logger -p local6.info -t access " vcombined
In rsyslog.conf:
*.* @logserver
Logserver
syslog-ng.conf:
...
parser p_apache…