Configure Tomcat to syslog

Linux and Unix-Like Red Hat
1

Hi ALL,

Thanks for previous replies..

This thread is regarding tomcat logs -> Syslog Server.
I have followed this doc:-

Red Hat Knowledgebase: How do I log Tomcat output to a remote syslog server?

But no success.. any clues?

Thanks alot!
Sudhir

2

Please show us the contents of your log4j.properties file

3

Hi Murphy,

Thanks for the reply...

Following log4j.properties file is from /classes ( Tomcat application)

log4j.rootLogger=WARN, file, SYSLOG
  
log4j.appender.file=org.apache.log4j.RollingFileAppender
log4j.appender.file.append=true
log4j.appender.file.File=/var/logs/apache/tomcat.log
log4j.appender.file.MaxFileSize=5MB 
log4j.appender.file.maxBackupIndex=10 
log4j.appender.file.layout=org.apache.log4j.PatternLayout
log4j.appender.file.layout.ConversionPattern=%d{DATE} - [%t] - %C{1}.%M(%L) - %p: %m%n

log4j.appender.SYSLOG=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSLOG.SyslogHost=127.0.0.1
log4j.appender.SYSLOG.Facility=LOCAL0
log4j.appender.SYSLOG.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSLOG.layout.ConversionPattern=%-4r %-5p %c{2} %M.%L %x - %m\n
log4j.appender.SYSLOG.threshold=DEBUG
# Print only messages of level ERROR or above in the package noModule.
log4j.logger.noModule=FATAL

# OpenSymphony Stuff
log4j.logger.net.apache.framework=DEBUG
log4j.logger.net.apache=DEBUG
log4j.logger.org.apache.struts2=ERROR
log4j.logger.org.hibernate.type=ERROR
log4j.logger.org.hibernate.SQL=ERROR

In Syslog we have this entry for tomcat logs :-
/etc/syslog.conf

LOCAL0.*                                                /var/logs/apache/tomcat.log

*.*         192.168.10.1 (IP of syslog server)

I also do have a file in tomcat's /lib for log4j.properties that looks like:-

log4j.rootLogger=DEBUG,SYSLOG
log4j.appender.SYSLOG=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSLOG.SyslogHost=127.0.0.1
log4j.appender.SYSLOG.facility=LOCAL1
log4j.appender.SYSLOG.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSLOG.layout.ConversionPattern=%-4r %-5p %c {2} %M. %L %x - %m\n

Please let me know what are the important lines for logging purposes.

Regards,
Sudhir

4

Nothing in your configuration jumps out at me as being incorrect.

Are log messages still going to /var/logs/apache/tomcat.log?