Logging, Syslog and Log Anaylsys Forums

Forums => Security Event Management => Topic started by: nakoruru1982 on June 12, 2007, 09:57:01 pm



Title: Syslog in solaris
Post by: nakoruru1982 on June 12, 2007, 09:57:01 pm
Hi madam or sir,

I have a few question about syslog on solaris, please give me some answers or suggestions.

How can I send syslog messages to solaris with security and reliability.

Shall I implement syslog protocol by ourselves?

Or whether there are some C/C++/Java library of syslog prototol?

Thank,
Nako Ruru


Title: Re: Syslog in solaris
Post by: nakoruru1982 on June 12, 2007, 10:01:12 pm
And please tell me if the default syslogd in solaris is secure or reliable.


Title: Re: Syslog in solaris
Post by: mutex on June 13, 2007, 12:55:58 pm
I believe you will want to implement syslog over SSL.  That would make it "secure" and "reliable".  The syslogd that comes with solaris won't do that.  You'll have to use rsyslog or syslog-ng + stunnel.


Title: Re: Syslog in solaris
Post by: nakoruru1982 on June 13, 2007, 08:17:48 pm
Thanks for your reply.

And could you tell me about what are the features of default syslogd on solaris.

I mean what they can do, and what they can't.


Title: Re: Syslog in solaris
Post by: mutex on June 14, 2007, 07:18:09 am
the default syslog in nearly every OS supports very basic functionality.  It can log messages locally to a file, or send them to a remote syslog server (via UDP, unencrypted transport), configurable only by the facility and severity of the messages.  In most default syslogd's, you can only take one action on a type of message, and there is little to no flexibility on file naming, etc.

Syslog-ng and rsyslog support much more advanced processing of messages - based on the source host of the message, it allows for flexibility in file names (like using the date, time, hostname, etc), integration with databases, transport over TCP/SSL (rsyslog only, I think).


Title: Re: Syslog in solaris
Post by: nakoruru1982 on June 14, 2007, 08:22:11 pm
Thank you very much for your helping me so much.

Would you mind my having you MSN address or email address?

Thanks
Nako


Title: Re: Syslog in solaris
Post by: nakoruru1982 on June 14, 2007, 10:16:42 pm
Thank you very much for your helping me so much.

Would you mind my having you MSN address or email address?

Thanks
Nako

My MSN is NakoRuru19820329@hotmail.com, and my email is heliang@symbio.com.cn