Re: [exim] [EXIM] Centralize mainlog

Top Page
Delete this message
Reply to this message
Author: Matthew Newton
Date:  
To: Fabián M Sales
CC: Exim-Users
Subject: Re: [exim] [EXIM] Centralize mainlog
On Wed, Mar 16, 2016 at 10:08:34AM -0300, Fabián M Sales wrote:
> Can centralize log on a single server? I have many servers with Exim and
> centralize the log if I can do a much better track.
> Can make log the syslog?


You can log to syslog directly.

http://exim.org/exim-html-current/doc/html/spec_html/ch-log_files.html

We write locally to ensure the log is safe, and then feed that into...

> I Read some "Lumberjack, Logstash, and Elasticsearch" someone has been
> able to use?


...elasticsearch. Graeme wrote a decent set of blog articles that
will get you started:
https://graemef.wordpress.com/tech-stuff/exim-logstash/

to be honest, this is really the only way I interrogate our exim
logs now. In fact, most logs. Elasticsearch is pretty amazing.

Matthew


--
Matthew Newton, Ph.D. <mcn4@???>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp@???>