To collect logs from a chroot using a syslog-ng client running on the host, complete the following steps:
Procedure 7.2. Collecting logs from chroot
Create a /dev directory within the chroot. The
applications running in the chroot send their log messages here.
Create a local source in the configuration file of the syslog-ng application
running outside the chroot. This source should point to the
/dev/log file within the chroot (e.g., to the
/chroot/dev/log directory).
Include the source in a log statement.
© 2007-2008 BalaBit IT Security
Please send your comments or documentation bugs to: documentation@balabit.com