=====Overview=====
log.offbyone.lan is the network syslog server in the LAIR.
^ hostname ^ RAM ^ disk ^ swap ^ OS ^ Kernel ^
| log.offbyone.lan | 256MB | 4GB (/) | 128MB | Debian 8.0 "Jessie" (AMD64) | 3.14-1-amd64 |
log.offbyone.lan created on sokraits on 07/12/2014.
=====News=====
* 04/11/2014 -- Created log.offbyone.lan to replace the old one (mth)
* 07/12/2014 -- re-recreated log.offbyone.lan and deployed (mth)
=====TODO====
* sanitize syslog-ng.conf
* create new client syslog-ng.conf
* explore switching over to rsyslog
=====Xen Config=====
====Creation====
log.offbyone.lan created on sokraits on 07/12/2014:
sokraits:~# xen-create-image --hostname=log role=udev --mac=00:16:3E:2d:47:76
====Configuration====
######################################################################
##
## LAIR Xen VM configuration file
##
## created by xen-tools 4.4 on Sat Jul 12 11:51:42 2014.
##
######################################################################
######################################################################
##
## PyGRUB
##
bootloader = '/usr/lib/xen-4.3/bin/pygrub'
######################################################################
##
## CPU(s) + memory size
##
memory = '256'
vcpus = '1'
######################################################################
##
## Disk device(s).
##
root = '/dev/xvda1 ro'
disk = [ 'file:/xen/images/log.disk,xvda1,w',
'file:/xen/images/log.swap,xvda2,w' ]
######################################################################
##
## Hostname
##
name = 'log'
######################################################################
##
## Networking
##
dhcp = 'dhcp'
vif = [ 'bridge=xenbr1,mac=00:16:3E:2d:47:76' ]
######################################################################
##
## Behaviour
##
on_poweroff = 'destroy'
on_reboot = 'restart'
on_crash = 'restart'
=====Network Configuration=====
^ Machine ^ Interface ^ IP Address ^ MAC Address ^ Other Names ^
| log.offbyone.lan | eth0 | 10.80.2.15 | 00:16:3E:2d:47:76 | |
=====Packages=====
The following packages have been installed on db:
lair-std (replaced syslog-ng.conf with custom one for the log server)
lair-ldap (nslcd pam-ldapd libnss-ldapd)
lair-nfs
lair-autofs
mosh
=====syslog-ng config=====
As log is the log aggregator, it mustn't have the LAIR standard client configuration. Following is its config:
====package_thing.conf====
Identification of the file(s) to edit, along with working configs:
##
## package_thing.conf - configuration file for package_thing
##
############ GENERAL PARAMETERS #################
Server=blah.offbyone.lan
Hostname=sample
Be sure to do an entry for each relevant config file. The idea is to allow someone else to replicate the work you've done (that someone could easily be you).
=====important topic=====
Explanation of important topic relevant to the service your machine is providing.
=====Potentially useful URLs=====
* https://peter.blogs.balabit.com/2010/02/how-to-collect-apache-logs-by-syslog-ng/
* http://blog.tremily.us/posts/syslog-ng/