Discussion:
acct and syslog
Mustapha Bouikhif
2008-07-29 13:05:56 UTC
Permalink
Hi folks,

Is there a simple way to send accounting logs (of FR 2.0.5) to syslog ?
I mean the various detail files: auth_log, reply_log,
pre||post_proxy_log ...
It is possible to append them to radius.log (who can be maintained by
syslog) but i think is a bad idea.

thanks for any clues...
--
Mustapha BOUIKHIF
Service Systèmes d'Information
CNRS - DR4

tel: +33 1 69 82 33 97
fax: +33 1 69 82 33 39

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan DeKok
2008-07-30 10:15:32 UTC
Permalink
Post by Mustapha Bouikhif
Is there a simple way to send accounting logs (of FR 2.0.5) to syslog ?
I mean the various detail files: auth_log, reply_log,
pre||post_proxy_log ...
You REALLY don't want to do that. It's a very bad idea.
Post by Mustapha Bouikhif
It is possible to append them to radius.log (who can be maintained by
syslog) but i think is a bad idea.
They are separate logs, and intended to stay separate. Are you sure
you want gigabytes of messages in syslog?

Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Mustapha Bouikhif
2008-07-30 11:14:56 UTC
Permalink
Post by Alan DeKok
Post by Mustapha Bouikhif
Is there a simple way to send accounting logs (of FR 2.0.5) to syslog ?
I mean the various detail files: auth_log, reply_log,
pre||post_proxy_log ...
You REALLY don't want to do that. It's a very bad idea.
Post by Mustapha Bouikhif
It is possible to append them to radius.log (who can be maintained by
syslog) but i think is a bad idea.
They are separate logs, and intended to stay separate. Are you sure
you want gigabytes of messages in syslog?
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I want to send acct logs to a central log server to meet our
organisation recommondations (logs must be kept one year). No problem
with size logs, I have necessary space for that.
thanks.
--
Mustapha BOUIKHIF
Service Systèmes d'Information
CNRS - DR4

tel: +33 1 69 82 33 97
fax: +33 1 69 82 33 39

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan DeKok
2008-07-30 12:39:54 UTC
Permalink
Post by Mustapha Bouikhif
I want to send acct logs to a central log server to meet our
organisation recommondations (logs must be kept one year). No problem
with size logs, I have necessary space for that.
Use rsync. Or FTP. Or even RADIUS to proxy the accounting packets.

Don't use syslog.

Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Anders Holm
2008-07-31 11:17:31 UTC
Permalink
I'm unsure here why syslog would be a bad idea in the case of FreeRADIUS.
However, there is also another option, the SQL logging options... Perhaps
those may be handy as well?

//anders
Post by Alan DeKok
Post by Mustapha Bouikhif
I want to send acct logs to a central log server to meet our
organisation recommondations (logs must be kept one year). No problem
with size logs, I have necessary space for that.
Use rsync. Or FTP. Or even RADIUS to proxy the accounting packets.
Don't use syslog.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan DeKok
2008-07-31 12:06:54 UTC
Permalink
Post by Anders Holm
I'm unsure here why syslog would be a bad idea in the case of FreeRADIUS.
syslog is generally for one-line log messages. Not for gigabytes of
traffic. Accounting logs generate gigabytes of traffic, and do not need
the overhead of syslog.
Post by Anders Holm
However, there is also another option, the SQL logging options... Perhaps
those may be handy as well?
Exactly. Databases already do replication and synchronization. The
right tool should be used for the job. Syslog is not the right tool for
accounting logs.

Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Loading...