TECHZEN Zenoss User Community ARCHIVE  

Zenoss and syslog daemon?

Subject: Zenoss and syslog daemon?
Author: Joan
Posted: 2014-10-28 03:07

I recently installed syslog-ng on the centos server we have also zenoss to aggregate the log colection from multiple sources. After some days working without issues, the logs seem to reacg one of zenoss processes (zensyslog.py) that I don't know anything about.
I'd like to know if there's some docs on:
- What does exactly zensyslog
- Can is live along a syslog collector such as syslog-ng
- Can zensyslog be used to collect/store the logs received, if so, where are them.

Joan



Subject: zensyslog is the Zenoss
Author: Jane Curry
Posted: 2014-10-28 06:17

zensyslog is the Zenoss daemon that collects syslog messages. Like syslog-ng, by default it listens on port UDP/514 so you don't want both daemons fighting over that port if they are both listening on the same server. You can reconfigure either daemon to use a different port - probably easier to reconfigure Zenoss. Alternatively, use a different system to collect syslogs and then forward them to Zenoss's zensyslogd.

You will find a fairly in-depth description of how zensyslog works in my paper on Zenoss event management at http://www.skills-1st.co.uk/papers/jane/zenoss4-events/

Cheers,
Jane

Email: jane.curry@skills-1st.co.uk    Web: https://www.skills-1st.co.uk



Subject: Thanks for the link, it's
Author: Joan
Posted: 2014-10-28 11:26

Thanks for the link, it's really an interesting information, following your suggestions I've done the following:
- Reenabled zensylog (I had disabled from zenoss startup)
- Changed the port to 515 instead of 514
- When I wish to monitor syslog events I'll just forward them to 515



< Previous
OID does not work on Windows R2 Datacenter...
  Next
zProperties
>