Rsyslog

Configs

Send to mySQL all logons to a Samba PDC

aptitude install rsyslog-mysql

rsyslogd config

on MySQL server

/etc/rsyslog.d/mysql.conf

$ModLoad ommysql
:msg, contains, "connect to service netlogon initially as user" :ommysql:localhost,Syslog,rsyslog,pass

To receive remote notifications, for example from BDC on PDC uncomment on/etc/rsyslog.conf

$ModLoad imtcp
$InputTCPServerRun 514

and on BDC /etc/rsyslog.d/to_remote.conf

$ModLoad ommysql
:msg, contains, "connect to service netlogon initially as user" @@10.0.0.1

Samba

/etc/samba/smb.conf

[global]
syslog = 2

Referencias

• http://www.gentoo-wiki.info/Rsyslog

Filtros

• http://www.rsyslog.com/doc-property_replacer.html
• http://www.rsyslog.com/doc-rsyslog_conf_filter.html