FreeBSD Jail: the best option to store logs centrally?

A

Askon2014-08-20 20:45:43

FreeBSD

Askon, 2014-08-20 20:45:43

Currently using a scheme with syslog-ng on the host. On jail machines, the only entry in syslog.conf is "*.* @logsrv". But such a scheme is not suitable for collecting apache logs with many virtual hosts, in addition, collecting logs via udp within a single iron server does not look very good. There was an option to mount /var/log of guest machines via unionfs to the corresponding folder on the host, but then in case of compromise of the guest machine, it becomes possible to erase all its logs.
Please share beautiful solutions to this problem.

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

V

Vadim Misbakh-Soloviev, 2014-08-24
@mva

Well, the idea with syslog-ng justifies itself and is time-tested.
// what's wrong with Apache's multihosts when logging to syslog (well, except that you get tired of writing rules, because this moment is treated by a script)?