UBUNTU 24.04 | Cài dặt và cấu hình SYSLOG-NG (bản 4.3.1) | KHÔNG TIẾNG

[@atuanlab]

// CẤU HÌNH TRÊN SERVER --- syslog-ng.conf
@version: 4.3
@include "scl.conf"
options { chain_hostnames(off); flush_lines(0); use_dns(no); use_fqdn(no);
dns_cache(no); owner("root"); group("adm"); perm(0640);
stats_freq(0); bad_hostname("^gconfd$");
};
source s_src {
system();
internal();
};
source s_net {
network(ip(0.0.0.0) transport("tcp") port(1000));
};
destination d_logs {
file(
"/var/log/syslog-ng/messages_${HOST}"
owner("root")
group("root")
perm(0777)
);
};

log {
source(s_src); source(s_net); destination(d_logs);
};
@include "/etc/syslog-ng/conf.d/*.conf"
// CẤU HÌNH TRÊN CLIENT --- syslog-ng.conf
@version: 4.3
@include "scl.conf"
options { chain_hostnames(off); flush_lines(0); use_dns(no); use_fqdn(no);
dns_cache(no); owner("root"); group("adm"); perm(0640);
stats_freq(0); bad_hostname("^gconfd$");
};
source s_src {
system();
internal();
};
destination d_net {
network("192.168.38.100" transport("tcp") port(1000) log_fifo_size(1000));
};
log {
source(s_src); destination(d_net);
};

[@atuanlab]

// CẤU HÌNH DÙNG TLS/SSL CHO SERVER
@version: 4.3
@include "scl.conf"
options { chain_hostnames(off); flush_lines(0); use_dns(no); use_fqdn(no);
dns_cache(no); owner("root"); group("adm"); perm(0640);
stats_freq(0); bad_hostname("^gconfd$");
};
source s_src {
system();
internal();
};
source s_net {
network(ip(0.0.0.0)
transport("tls")
tls(
ca-dir("/etc/syslog-ng/cert")
key-file("/etc/syslog-ng/cert/private.key")
cert-file("/etc/syslog-ng/cert/server.crt")
peer-verify(optional-untrusted)
)
port(1000)
);
};
destination d_logs {
file(
"/var/log/syslog-ng/messages_${HOST}"
owner("root")
group("root")
perm(0777)
);
};
log {
source(s_src); source(s_net); destination(d_logs);
};
@include "/etc/syslog-ng/conf.d/*.conf"
// CẤU HÌNH DÙNG TLS/SSL CHO CLIENT
@version: 4.3
@include "scl.conf"
options { chain_hostnames(off); flush_lines(0); use_dns(no); use_fqdn(no);
dns_cache(no); owner("root"); group("adm"); perm(0640);
stats_freq(0); bad_hostname("^gconfd$");
};
source s_src {
system();
internal();
};
destination d_net {
network("192.168.38.100"
transport("tls")
tls(
ca-file("/etc/syslog-ng/cert/server.crt")
)
port(1000)
log_fifo_size(1000));
};
log {
source(s_src); destination(d_net);
};
@include "/etc/syslog-ng/conf.d/*.conf"