Forum Discussion
NimbostratusWay to send specific log file ( /shared/nfast/log/hardserver.log) to remote destination in real time
Hi guys,
We are using Thales netHSMs to decrypt the key information on our F5s. We have requirement to store logs containing details of F5 <-> netHSM communication remotely i.e. Splunk, LogLogic.
Are you aware of any way to send the content of choosen logfile to specific logging location in real time?
Thanks in advance for any help
1 Reply
Leonardo_SouzaCirrocumulus
I think rsyslog has the functionality you are looking for. However, is not installed in a F5 unit. Not sure if can do the same just with syslog-ng.
See this example:
http://www.rsyslog.com/using-the-text-file-input-module/
You can try to install the RPM, but you will not get support for problems in rsyslog:
http://sharadchhetri.com/2014/03/01/install-and-configure-rsyslog-on-rhel-6-centos-6/
Another option is to create a script to move the messages from the file to the syslog-ng. Basically, the script keep monitoring the file, every time a line is added, it will echo it to syslog-ng via logger command.
