Tuesday, June 14, 2011

sending logs to splunk

#* * * * * root lockfile -l5 -s5 /tmp/mysql_error_log.lock && /usr/sbin/logtail /dbhost2_logs/dbhost2.err | /usr/bin/nc -w2 -v dblogs1 10001 && rm -rf /tmp/mysql_error_log.lock > /dev/null 2>&1

#* * * * * root lockfile -l5 -s5 /tmp/messages_log.lock && /usr/sbin/logtail /var/log/messages | /usr/bin/nc -w2 -v dblogs1 10002 && rm -rf /tmp/messages_log.lock > /dev/null 2>&1

No comments: