4.1. Installing syslog-ng on RPM-based platforms (Red Hat, SUSE, AIX)

To install syslog-ng on operating systems that use the Red Hat Package Manager (RPM), complete the following steps. Installing syslog-ng automatically replaces the original syslog service. The following supported operating systems use RPM:

Procedure 4.1. Installing syslog-ng on RPM-based systems

  1. Use the your username and password received together with your syslog-ng Premium Edition license to download the following binaries. Make sure to download the package specific for the processor architecture of the host.

  2. Issue the following command as root:

    rpm -i[v] libdbi8_<version>_<arch>.rpm syslog-ng-premium-edition-<version>.<arch>.rpm

  3. If you use an SQL destination, issue the command corresponding to the database:

    • For MySQL:

      rpm -i[v] libdbd8-mysql_<version>_<arch>.rpm

    • For MSSQL:

      rpm -i[v] libdbd8-freetds_<version>_<arch>.rpm

    • For Oracle:

      rpm -i[v] libdbd8-oracle_<version>_<arch>.rpm

    • For PostgreSQL:

      rpm -i[v] libdbd8-pgsql_<version>_<arch>.rpm

    • For SQLite:

      rpm -i[v] libdbd8-sqlite_<version>_<arch>.rpm

  4. Optional step: If you use an Oracle database destination, complete the following steps:

    Download Oracle Instant Client Basic Package version 10.2.0.X for your platform from http://www.oracle.com/technology/software/tech/oci/instantclient/index.html and unzip the package into a single directory (e.g., /usr/local/oracle/instantclient_10_2). You need to register to access the package, but registration is free.

    [Note] Note

    The syslog-ng application currently supports only Oracle Instant Client Basic Package version 10.2.0.X. This does not mean that you have to use version 10 of the Oracle database, because the different versions of the Instant Client all support the same protocol. Multiple versions of the Oracle Instant Client can be run simultaneously if other applications running on your system require a different version.

    Edit the /etc/init.d/syslog-ng file and add the following lines before the case block. Replace /usr/local/oracle/instantclient_10_2 with the actual path of Oracle Instant Client version 10.2.0.3.

    [Note] Note

    On Solaris 8 and 9, you have to edit the /etc/init.d/syslog file.

    LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/oracle/instantclient_10_2
    export LD_LIBRARY_PATH
  5. Optional step: If Novell AppArmor is used on the computer, copy the /usr/share/doc/syslog-ng/sbin.syslog-ng file into the /etc/apparmor.d/ directory and restart AppArmor.

  6. Optional step: When installing syslog-ng to the central syslog-ng server, copy the license.txt license file to the /etc/syslog-ng/ directory of the server.

  7. Optional step for AIX systems: To redirect the messages of the AIX Error log into syslog, create a file (e.g., /tmp/syslog-ng.add) with the following contents:

    errnotify:
    en_name = "syslog1"
    en_persistenceflg = 1
    en_method = "logger Msg from Error Log: `errpt -l $1 | grep -v 'ERROR_ID TIMESTAMP'`"

    Then execute the following command as root: odmadd /tmp/syslog-ng.add.


© 2007 BalaBit IT Security
Please send your comments or documentation bugs to: documentation@balabit.com