Hello, I'm trying to send Dovecot logs to a Graylog server. To do this, I'd like to pass logs to rsyslog and rsyslog pass logs to remote Graylog server. I set in dovecot.conf : syslog_facility = local5.info I set in rsyslog.conf : local5.info @192.168.xxx.xxx:5555 Restarted services and it doesn't work. I use nmap to test if port 5555 is opened and this port is open. What missed I ? Thanks Nicolas
Hi Nicolas, If you use 'logger' to test local5.info without Dovecot in the mix do you have success reaching your remote server? Sent from my iPad.> On Feb 5, 2016, at 6:42 AM, Nicolas Fo <nicocofo2 at gmail.com> wrote: > > Hello, > I'm trying to send Dovecot logs to a Graylog server. > To do this, I'd like to pass logs to rsyslog and rsyslog pass logs to > remote Graylog server. > I set in dovecot.conf : syslog_facility = local5.info > I set in rsyslog.conf : local5.info @192.168.xxx.xxx:5555 > Restarted services and it doesn't work. > > I use nmap to test if port 5555 is opened and this port is open. > > What missed I ? > > Thanks > > Nicolas
Hello, thanks to take time for my problem. Just tested with this command from my mail server: logger -p local5.info "hello world" This message is well sent to my Graylog server. It seems it's a problem between Dovecot and rsyslog :/ Any ideas ? Thanks Nicolas 2016-02-05 16:52 GMT+01:00 Brad Guzules <unixmfwic at mac.com>:> Hi Nicolas, > > If you use 'logger' to test local5.info without Dovecot in the mix do you > have success reaching your remote server? > > Sent from my iPad. > > > On Feb 5, 2016, at 6:42 AM, Nicolas Fo <nicocofo2 at gmail.com> wrote: > > > > Hello, > > I'm trying to send Dovecot logs to a Graylog server. > > To do this, I'd like to pass logs to rsyslog and rsyslog pass logs to > > remote Graylog server. > > I set in dovecot.conf : syslog_facility = local5.info > > I set in rsyslog.conf : local5.info @192.168.xxx.xxx:5555 > > Restarted services and it doesn't work. > > > > I use nmap to test if port 5555 is opened and this port is open. > > > > What missed I ? > > > > Thanks > > > > Nicolas >
On 05/02/2016 9:42 AM, Nicolas Fo wrote:> I set in dovecot.conf : syslog_facility = local5.infoTry: syslog_facility = local5 Source: http://wiki.dovecot.org/Logging#Syslog_Example
Just tested, same result :( Thanks Nicolas 2016-02-06 16:44 GMT+01:00 Oscar del Rio <delrio at mie.utoronto.ca>:> On 05/02/2016 9:42 AM, Nicolas Fo wrote: > >> I set in dovecot.conf : syslog_facility = local5.info >> > > Try: > > syslog_facility = local5 > > Source: > http://wiki.dovecot.org/Logging#Syslog_Example >