56 lines
1.2 KiB
Plaintext
Executable File
56 lines
1.2 KiB
Plaintext
Executable File
#Options
|
|
|
|
options {
|
|
create-dirs(yes);
|
|
owner(administrator);
|
|
group(administrator);
|
|
perm(0640);
|
|
dir-owner(administrator);
|
|
dir-group(administrator);
|
|
dir-perm(0750);
|
|
};
|
|
|
|
#Sources
|
|
|
|
source s_regular { tcp(port(5140)); };
|
|
source s_cisco { tcp(port(5141) flags(no-parse,store-raw-message)); };
|
|
source s_servers { tcp(port(5142) flags(no-parse,store-raw-message)); };
|
|
|
|
#Templates
|
|
|
|
template t_jsonfile {
|
|
template("$(format-json --scope rfc5424 --scope dot-nv-pairs --rekey .* --shift 1 --scope nv-pairs --key ISODATE)\n");
|
|
};
|
|
|
|
#Parsers
|
|
|
|
parser p_cisco { cisco-parser(); };
|
|
|
|
#Destinations
|
|
|
|
destination d_raw {
|
|
file("/home/administrator/Desktop/SYSLOG/RAW_LOGS/$HOST-$YEAR-$MONTH-$DAY.log" template("${RAWMSG}\n"));
|
|
};
|
|
destination d_from_cisco {
|
|
file("/home/administrator/Desktop/SYSLOG/CISCO_DEVICES/$HOST-$YEAR-$MONTH-$DAY.log" template(t_jsonfile));
|
|
};
|
|
destination d_from_servers {
|
|
file("/home/administrator/Desktop/SYSLOG/SERVERS/$HOST-$YEAR-$MONTH-$DAY.log" );
|
|
};
|
|
|
|
#Loggers
|
|
|
|
log {
|
|
source(s_regular);
|
|
destination(d_raw);
|
|
};
|
|
log {
|
|
source(s_cisco);
|
|
parser(p_cisco);
|
|
destination(d_from_cisco);
|
|
};
|
|
log {
|
|
source(s_servers);
|
|
destination(d_from_servers);
|
|
};
|