log.offbyone.lan is the network syslog server in the LAIR.

log.offbyone.lan created on sokraits on 07/12/2014.

• 04/11/2014 – Created log.offbyone.lan to replace the old one (mth)
• 07/12/2014 – re-recreated log.offbyone.lan and deployed (mth)

• sanitize syslog-ng.conf
• create new client syslog-ng.conf
• explore switching over to rsyslog

log.offbyone.lan created on sokraits on 07/12/2014:

sokraits:~# xen-create-image --hostname=log role=udev --mac=00:16:3E:2d:47:76

######################################################################                    
##
## LAIR Xen VM configuration file
##
##     created by xen-tools 4.4 on Sat Jul 12 11:51:42 2014.
##
######################################################################

######################################################################
##
## PyGRUB
##
bootloader  = '/usr/lib/xen-4.3/bin/pygrub'

######################################################################
##
## CPU(s) + memory size
##
memory      = '256'
vcpus       = '1'

######################################################################
##
## Disk device(s).
##
root        = '/dev/xvda1 ro'
disk        = [ 'file:/xen/images/log.disk,xvda1,w',
                'file:/xen/images/log.swap,xvda2,w' ]

######################################################################
##
## Hostname
##
name        = 'log'

######################################################################
##
## Networking
##
dhcp        = 'dhcp'
vif         = [ 'bridge=xenbr1,mac=00:16:3E:2d:47:76' ]

######################################################################
##
## Behaviour
##
on_poweroff = 'destroy'
on_reboot   = 'restart'
on_crash    = 'restart'

The following packages have been installed on db:

lair-std (replaced syslog-ng.conf with custom one for the log server)
lair-ldap (nslcd pam-ldapd libnss-ldapd)
lair-nfs
lair-autofs
mosh

As log is the log aggregator, it mustn't have the LAIR standard client configuration. Following is its config:

Identification of the file(s) to edit, along with working configs:

##
## package_thing.conf - configuration file for package_thing
##

############ GENERAL PARAMETERS #################
Server=blah.offbyone.lan
Hostname=sample

Be sure to do an entry for each relevant config file. The idea is to allow someone else to replicate the work you've done (that someone could easily be you).

Explanation of important topic relevant to the service your machine is providing.

• https://peter.blogs.balabit.com/2010/02/how-to-collect-apache-logs-by-syslog-ng/
• http://blog.tremily.us/posts/syslog-ng/