[ale] Pulling log entries rather than pushing from DMZ host

[Jeff Lightner]

Thanks - I had in fact already begun working on the ssh with tail -f - I
was just wondering if there wasn't some prebuilt tool already designed
to do this.   Something like a reverse syslog or logwatcher.

 

________________________________

From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of
Kenneth Ratliff
Sent: Friday, March 20, 2009 7:46 PM
To: ale at ale.org
Subject: Re: [ale] Pulling log entries rather than pushing from DMZ host

 

 

On Mar 20, 2009, at 5:27 PM, Jim Popovitch wrote:





2009/3/20 Jeff Lightner <jlightner at water.com>:



We have a need to monitor logs for Tomcat and Apache on a new web server

	that is of course in DMZ.

	 

	I know I can use syslog to sends logs from this host inside the
firewall but

	I don't want to initiate traffic from inside the DMZ.

	 

	Is there any tool that would let me initiate a connection from
my internal

	hosts to the DMZ host and pull log entries as they occur?


There's a million ways... ;-) It all depends on what you want to do
with the data you pick up.

Here's some examples:

ssh host.domain.tld tail -f /var/log/apache/access.log >
host.domain.tld.log & tail -f host.domain.tld.log

ssh host.domain.tld tail -f /var/log/apache/access.log |
/usr/local/bin/script-on-local-pc

etc.

-Jim P.

 

Aww, cmon, no netcat? /grin
 
Please consider our environment before printing this e-mail or attachments.
----------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20090323/8a5ce079/attachment-0001.html