The syslog-ng 3.0 Administrator Guide

Document version: Thirteenth
Release date: September 23, 2010
Latest version available at the BalaBit Documentation Page

5.1.1. Installing the syslog-ng agent in standalone mode

The syslog-ng Agent for Windows application can be installed in standalone mode on independent hosts. If your hosts are members of a domain, install the syslog-ng agent on the domain controller, as described in Section 5.1.2, “Installing the syslog-ng agent on the domain controller and the hosts of a domain”. The syslog-ng agent requires about 3 MB hard disk space.

To install the syslog-ng agent in standalone mode, complete the following steps:

[Note] Note

The syslog-ng Agent for Windows requires the Microsoft .NET Framework version 2.0. This package is usually already installed on most hosts. It can be downloaded at:

http://www.microsoft.com/downloads/details.aspx?FamilyID=0856EACB-4362-4B0D-8EDD-AAB15C5E04F5&displaylang=en

Procedure 5.1.1.1. Installing the syslog-ng agent in standalone mode

  1. Start the installer. Run the syslog-ng-agent-<versionnumber>-setup.exe file.

    [Note] Note

    Installing the syslog-ng agent requires administrator privileges.

  2. Read the End User License Agreement and select I Agree.

  3. Select the destination folder where you want to install the syslog-ng Agent for Windows application, then select Next.

  4. Select Standalone mode, then click Next.

  5. Starting from version 3.0.3, the syslog-ng Agent sends only messages that are created after the agent has been installed. If you want to send old log messages to the syslog-ng server, enable the Send log messages generated before the syslog-ng Agent was installed option and click Install.

  6. The installer automatically opens the configuration interface of the syslog-ng agent. As a minimum, you must set the IP address of the destination server, and the agent will automatically start sending eventlog messages to your central logserver from the Application, Security, and System eventlog containers.

    [Note] Note

    The installation is completed only after you close the configuration interface.

In standalone mode, to configure an already installed syslog-ng agent, select Start Menu > Programs > syslog-ng Agent for Windows > Configure syslog-ng Agent. Alternatively, select Start Menu > Run, enter gpedit.msc, then select Computer configuration > syslog-ng Agent Settings

[Warning] Warning

After modifying its configuration, you have to restart the syslog-ng Agent service for the changes to take effect. To restart the syslog-ng Agent service, select Start Menu > Run enter services.msc and restart the syslog-ng Agent service.

Prev  Up  Next
5.1. Installing the syslog-ng agent  Home | Contents  5.1.2. Installing the syslog-ng agent on the domain controller and the hosts of a domain

© 2007-2010 BalaBit IT Security
Please send your comments or documentation bugs to: documentation@balabit.com