X-Spam-Check-By:	sourceware.org
DKIM-Signature:	a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=k/KTR0byY11xJcJdK0y/e+QxwHgEJcuwtw/mufJRIn9TniKQK/FYSEpGeT6MfEE6tzBj9CaCRqLvwKqQWCZCwgrR1udhTtjxCjGiIyC621KidC6gWPLPxpJyThQCzn1lYXjkgqI/nYeoKzjQj6kWgGUapW45bDu9XWdL8oKSdJ0=
Message-ID:	<5abc24640702261308n941b2efw1e3fb5501a12dcbd@mail.gmail.com>
Date:	Mon, 26 Feb 2007 16:08:52 -0500
From:	"Andrew Louie" <louiea AT gmail DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: sshd timestamp logging
In-Reply-To:	<31b7d2790702261108u136426c6y5559f6f59acf3bee@mail.gmail.com>
MIME-Version:	1.0
References:	<5abc24640702261011v129b1f9fkb47e78bfb151bc29 AT mail DOT gmail DOT com> <31b7d2790702261016sba3f0b5j526d5ad4fbae750b AT mail DOT gmail DOT com> <5abc24640702261054m29861e2dk16fcda2a5d1464bc AT mail DOT gmail DOT com> <5abc24640702261057x122cc04fldd539c7b631a2aef AT mail DOT gmail DOT com> <31b7d2790702261108u136426c6y5559f6f59acf3bee AT mail DOT gmail DOT com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Unsubscribe:	<mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 2/26/07, DePriest, Jason R. <jrdepriest AT gmail DOT com> wrote:
> Read the book!
> First lines of /usr/share/doc/Cygwin/syslog-ng.README
>
> If you want to use syslog-ng, just run the /usr/bin/syslog-ng-config
> script.  This script will create a default configuration file
> /etc/syslog-ng.conf and it will install syslog-ng as a service on NT
> systems on request.
>

Okay I got it to work and am posting how i did it incase some poor
soul like myself runs into the same problem.

1) use the setup.exe to install the syslog-ng package

2) run: $/usr/bin/syslog-ng-config
    follow the prompts and install as a service

3) read the help on the syslog-ng.conf (man syslog-ng.conf)
       define sources, destinations, filters(if necessary) and connect
them with "log" statements


3) edit the /etc/syslog-ng.conf file and add the following source:
      udp(ip("127.0.0.1") port(514));  # ip: localhost, port 514 is
syslog, look in /etc/services for definitions of other ports

4) remember to hook up the source to a destination (like messages)

5) save, and start the syslog-ng service (cygrunsrv -S syslog-ng)

troubleshooting:

If the service fails to start make sure that SYSTEM or whoever you run
the syslog-ng service as can read/write /var/log/syslog-ng.log.

if the service starts but is not logging messages, restart the service
with the -d arguement (debug) and run a tail -f /var/log/syslog-ng.log
to see more helpful messages as they appear.




-- 
-Andrew Louie

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -