7.2.1. Procedure – Configure syslog-ng

To configure system logging in Zorp Professional complete the following steps.

1. Select the host where you want to configure system logging, then click New.

2. Choose a template for the System logging component.

   

   Figure 7.1. Selecting a syslog-ng template

   The following templates are available for the component:

   • Default: It collects logs from /dev/log and /proc/kmsg, and stores them in the /var/log/messages file.

   • Remote destinations: Type the IP address of your logserver into the Logserver IP field. It collects logs from /dev/log and /proc/kmsg, and stores them in the /var/log/messages file. The log messages are also sent to the logserver over TCP using the legacy BSD-syslog protocol (RFC3164).

   • Debian default: It collects logs from /dev/log and /proc/kmsg, and stores them in several different files, like the default syslog configuration on Debian systems.

   • Minimal: It defines an empty configuration.

3. View this initial configuration file by selecting the system logging component of a given host and click the View Current Configuration button.

   

   Figure 7.2. Basic syslog-ng.conf file created from the system logging chroot template