• obsah souboru syslog.conf

*.debug         /var/log/syslog/prio-debug.log
*.info          /var/log/syslog/prio-info.log
*.notice        /var/log/syslog/prio-notice.log
*.warning       /var/log/syslog/prio-warning.log
*.err           /var/log/syslog/prio-err.log
*.crit          /var/log/syslog/prio-crit.log
*.alert         /var/log/syslog/prio-alert.log
*.emerg         /var/log/syslog/prio-emerg.log

auth.*          /var/log/syslog/sys-auth.log
cron.*          /var/log/syslog/sys-cron.log
kern.*          /var/log/syslog/sys-kern.log
mail.*          /var/log/syslog/sys-mail.log
syslog.*        /var/log/syslog/sys-syslog.log

• nastavit logrotate.d

/var/log/syslog/*.log {
    sharedscripts
    postrotate
	/bin/kill -HUP `cat /var/run/syslogd.pid 2>/dev/null` 2>/dev/null || true
    endscript
}

• download

• nainstalovat evenlog

  ./configure --prefix=/usr/local/eventlog
  make
  make install

• vyrobit ENV proměnou: export PKG_CONFIG_PATH=/usr/local/eventlog/lib/pkgconfigog-ng
• zkompilovat syslog-ng

  ./configure --prefix=/usr/local --sysconfdir=/etc/syslog-ng
  make
  make install

options { sync (0);
          time_reopen (10);
          log_fifo_size (1000);
          long_hostnames (off);
          use_dns (no);
          use_fqdn (no);
          create_dirs (no);
          keep_hostname (yes);
        };


source s_udp {
    udp(ip("0.0.0.0") port(514));
};

destination d_mysql {
   pipe("/var/log/mysql.pipe"
     template("INSERT INTO logs
               (host, facility, priority, level, tag, datetime, program, msg)
                VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC',
                '$PROGRAM', '$MSG' );\n") template-escape(yes));
};

log {
    source(s_udp);
    destination(d_mysql);
};