X-Spam-Check-By: sourceware.org DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=LN+uZ5aPbDvH7w0oIg21twYkgzNpSFYHgRCUHMBoY0g/pSJwCPKmAqFeDWIRf1h5ygePd4hAabVJxDT7wWBsSSwnM+WPs+7GRFzN+rxcwrg2222i9usELy1ITPvDa7g7A9/YO+CP37dbWfRcfv+xSCJjvHR6n8aHQ1nc9mEdmpU= Message-ID: <5abc24640702261310j6fbf73ectbd961f01ff3378d7@mail.gmail.com> Date: Mon, 26 Feb 2007 16:10:23 -0500 From: "Andrew Louie" To: cygwin AT cygwin DOT com Subject: Re: sshd timestamp logging In-Reply-To: <5abc24640702261308n941b2efw1e3fb5501a12dcbd@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <5abc24640702261011v129b1f9fkb47e78bfb151bc29 AT mail DOT gmail DOT com> <31b7d2790702261016sba3f0b5j526d5ad4fbae750b AT mail DOT gmail DOT com> <5abc24640702261054m29861e2dk16fcda2a5d1464bc AT mail DOT gmail DOT com> <5abc24640702261057x122cc04fldd539c7b631a2aef AT mail DOT gmail DOT com> <31b7d2790702261108u136426c6y5559f6f59acf3bee AT mail DOT gmail DOT com> <5abc24640702261308n941b2efw1e3fb5501a12dcbd AT mail DOT gmail DOT com> X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com On 2/26/07, Andrew Louie wrote: > On 2/26/07, DePriest, Jason R. wrote: > > Read the book! > > First lines of /usr/share/doc/Cygwin/syslog-ng.README > > > > If you want to use syslog-ng, just run the /usr/bin/syslog-ng-config > > script. This script will create a default configuration file > > /etc/syslog-ng.conf and it will install syslog-ng as a service on NT > > systems on request. > > > > Okay I got it to work and am posting how i did it incase some poor > soul like myself runs into the same problem. > > 1) use the setup.exe to install the syslog-ng package > > 2) run: $/usr/bin/syslog-ng-config > follow the prompts and install as a service > > 3) read the help on the syslog-ng.conf (man syslog-ng.conf) > define sources, destinations, filters(if necessary) and connect > them with "log" statements > > > 3) edit the /etc/syslog-ng.conf file and add the following source: > udp(ip("127.0.0.1") port(514)); # ip: localhost, port 514 is > syslog, look in /etc/services for definitions of other ports > > 4) remember to hook up the source to a destination (like messages) > > 5) save, and start the syslog-ng service (cygrunsrv -S syslog-ng) > > troubleshooting: > > If the service fails to start make sure that SYSTEM or whoever you run > the syslog-ng service as can read/write /var/log/syslog-ng.log. > > if the service starts but is not logging messages, restart the service > with the -d arguement (debug) and run a tail -f /var/log/syslog-ng.log > to see more helpful messages as they appear. > > > > > -- > -Andrew Louie > Sorry about the e-mail address I forgot again!! =/ -- -Andrew Louie -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/