MonitorWare Knowledge Base

Hi

I'm using rsyslog to send access_log of my apache web servers to a centralized Log server.

I've a problem with long-line log (I'm loggin full request for traffic analysis) because rsyslog split Long line into two or more line (for same log apache write one line into a local log file).
I've writed a script, that parse log file and load interesting(for my analysis) data into a mysql database. My script want one line for one request.

I'm using system logger program to pass log from apache to rsyslog (on web server)
my httpd.conf
LogFormat "%v*g*%h*g*%{%Y-%m-%d %T}t*g*\"%r\"*g*%>s*g*%b*g*\"%{Referer}i\"*g*\"%{User-Agent}i\"*g*%D" sqlformat
CustomLog "|/usr/bin/logger -p local5.info" sqlformat env=!no-log

my rsyslog.conf on web server
local5.* @192.168.1.222
& ~

My rsyslog.conf on log server
$template dynfile,"/log_server/apache/%HOSTNAME%.access_log"
$template logsql,"%msg%\n",sql
local5.info ?dynfile;logsql
&~

any idea???

Thank you in advance and sorry for my bad english

Gianluca

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?