• Syslog and Windows

    From dragon@1:103/705 to Digital Man on Fri Feb 16 19:47:58 2024
    I'm running Synchronet on Windows. I have most of my other services on
    dozens of machines sending log data to a central Windows syslog server.
    I would LOVE to get Synchronet to do that as well. Possible?

    ---
    ■ Synchronet ■ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to dragon on Fri Feb 16 18:12:18 2024
    Re: Syslog and Windows
    By: dragon to Digital Man on Fri Feb 16 2024 07:47 pm

    I'm running Synchronet on Windows. I have most of my other services on dozens of machines sending log data to a central Windows syslog server.
    I would LOVE to get Synchronet to do that as well. Possible?

    If you run Synchronet on Windows a NT services, then all the log output goes to the Synchronet Event log:
    https://wiki.synchro.net/monitor:ntsvcs

    I don't have experience with it, but apparently using something like EventReporter, you can forward all Windows event log messages to a syslog server.
    --
    digital man (rob)

    Breaking Bad quote #15:
    Cheer up Gomey, your people still got J. Lo. - Hank Schrader
    Norco, CA WX: 58.6°F, 78.0% humidity, 2 mph W wind, 0.00 inches rain/24hrs
    --- SBBSecho 3.20-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From dragon@1:103/705 to Digital Man on Mon Feb 19 20:03:18 2024
    On 2/16/2024 21:12, Digital Man wrote:
    Re: Syslog and Windows
    By: dragon to Digital Man on Fri Feb 16 2024 07:47 pm

    > I'm running Synchronet on Windows. I have most of my other services on
    > dozens of machines sending log data to a central Windows syslog server.
    > I would LOVE to get Synchronet to do that as well. Possible?

    If you run Synchronet on Windows a NT services, then all the log output goes to the Synchronet Event log:
    https://wiki.synchro.net/monitor:ntsvcs

    I don't have experience with it, but apparently using something like EventReporter, you can forward all Windows event log messages to a syslog server.

    Quite a lot of functionality is lost by running Synchronet as a service.
    I would much prefer to have Synchronet send log entries directly to a
    remote syslog server. If this seems too difficult to implement, I won't
    keep pushing the idea.

    ---
    ■ Synchronet ■ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Digital Man on Tue Feb 20 00:53:09 2024
    Re: Re: Syslog and Windows
    By: Digital Man to dragon on Mon Feb 19 2024 10:05 pm

    I would much prefer to have Synchronet send log entries directly to a remote syslog server. If this seems too difficult to implement, I won't keep pushing the idea.

    Nobody's ever made the request before. <shrug>

    Hey, guy who runs serveral external servers here.

    i don't think it's necessary to be implimented directly into synchronet.
    they can have this functionality via scripting or editing the source code.
    ---
    ■ Synchronet ■ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Dumas Walker@1:103/705 to DRAGON on Tue Feb 20 08:52:00 2024
    Quite a lot of functionality is lost by running Synchronet as a service.
    I would much prefer to have Synchronet send log entries directly to a remote syslog server. If this seems too difficult to implement, I won't
    keep pushing the idea.

    Since it sounds like you are talking about windows, this may not be an
    option, but I think that rsyslog gives you the option to send the output to
    a remote syslog server. That should mean that individual software programs don't need to know how to do it on their own.


    * SLMR 2.1a * Avoid reality at all costs.

    ---
    ■ Synchronet ■ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to dragon on Mon Feb 19 22:05:33 2024
    Re: Re: Syslog and Windows
    By: dragon to Digital Man on Mon Feb 19 2024 08:03 pm

    On 2/16/2024 21:12, Digital Man wrote:
    Re: Syslog and Windows
    By: dragon to Digital Man on Fri Feb 16 2024 07:47 pm

    > I'm running Synchronet on Windows. I have most of my other services on
    > dozens of machines sending log data to a central Windows syslog server.
    > I would LOVE to get Synchronet to do that as well. Possible?

    If you run Synchronet on Windows a NT services, then all the log output goes to the Synchronet Event log:
    https://wiki.synchro.net/monitor:ntsvcs

    I don't have experience with it, but apparently using something like EventReporter, you can forward all Windows event log messages to a syslog server.

    Quite a lot of functionality is lost by running Synchronet as a service.

    What functionality is that? With the addition of MQTT support in v3.20, I plan to make running Synchronet as an NT service to as natural (and featureful) as it is to run it as a daemon on *nix.

    I would much prefer to have Synchronet send log entries directly to a remote syslog server. If this seems too difficult to implement, I won't keep pushing the idea.

    Nobody's ever made the request before. <shrug>
    --
    digital man (rob)

    Breaking Bad quote #13:
    I got twenty bucks that says he's a beaner. - Hank Schrader
    Norco, CA WX: 53.0°F, 96.0% humidity, 0 mph NW wind, 0.10 inches rain/24hrs
    --- SBBSecho 3.20-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From dragon@1:103/705 to Dumas Walker on Sun Feb 25 22:49:25 2024
    On 2/20/2024 08:52, Dumas Walker wrote:
    Quite a lot of functionality is lost by running Synchronet as a service.
    I would much prefer to have Synchronet send log entries directly to a
    remote syslog server. If this seems too difficult to implement, I won't
    keep pushing the idea.

    Since it sounds like you are talking about windows, this may not be an option, but I think that rsyslog gives you the option to send the output to
    a remote syslog server. That should mean that individual software programs don't need to know how to do it on their own.


    * SLMR 2.1a * Avoid reality at all costs.

    ---
    � Synchronet � CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP

    I am talking Windows.

    I manage multiple mail, s/ftp, im, firewall, and other servers spread
    out all over the World on a variety of OSes. Most of these are able to
    send messages to a central syslog server.

    There's also an IDS system sending syslog alerts.

    Currently, Synchronet's logs are bundled up by some scripts that forward
    them to syslog. I would like to remove the delay this introduces to
    that to, for instance, update my firewall against hack attempts.

    ---
    þ Synchronet þ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to dragon on Mon Feb 26 13:15:16 2024
    Re: Re: Syslog and Windows
    By: dragon to Dumas Walker on Sun Feb 25 2024 10:49 pm

    On 2/20/2024 08:52, Dumas Walker wrote:
    Quite a lot of functionality is lost by running Synchronet as a service. >> I would much prefer to have Synchronet send log entries directly to a >> remote syslog server. If this seems too difficult to implement, I won't >> keep pushing the idea.

    Since it sounds like you are talking about windows, this may not be an option, but I think that rsyslog gives you the option to send the output to
    a remote syslog server. That should mean that individual software programs don't need to know how to do it on their own.


    * SLMR 2.1a * Avoid reality at all costs.

    ---
    ¿ Synchronet ¿ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP

    I am talking Windows.

    I manage multiple mail, s/ftp, im, firewall, and other servers spread
    out all over the World on a variety of OSes. Most of these are able to
    send messages to a central syslog server.

    There's also an IDS system sending syslog alerts.

    Currently, Synchronet's logs are bundled up by some scripts that forward them to syslog. I would like to remove the delay this introduces to
    that to, for instance, update my firewall against hack attempts.

    Are you using a Syslog Agent for Windows?

    Do your other Windows applications have built-in syslog support? Are they open source?

    If you know, what format syslog msgs are you/they using: BSD or IETF format?
    --
    digital man (rob)

    Breaking Bad quote #23:
    Whiteboy's gonna kick your ass if you don't stop wasting his time. - Hank Norco, CA WX: 60.9°F, 73.0% humidity, 3 mph SSE wind, 0.01 inches rain/24hrs --- SBBSecho 3.20-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From dragon@1:103/705 to Digital Man on Mon Feb 26 21:15:06 2024
    On 2/26/2024 16:15, Digital Man wrote:
    Re: Re: Syslog and Windows
    By: dragon to Dumas Walker on Sun Feb 25 2024 10:49 pm

    > On 2/20/2024 08:52, Dumas Walker wrote:
    > >> Quite a lot of functionality is lost by running Synchronet as a service.
    > >> I would much prefer to have Synchronet send log entries directly to a
    > >> remote syslog server. If this seems too difficult to implement, I won't
    > >> keep pushing the idea.
    >
    > > Since it sounds like you are talking about windows, this may not be an
    > > option, but I think that rsyslog gives you the option to send the output
    > > to
    > > a remote syslog server. That should mean that individual software
    > > programs don't need to know how to do it on their own.
    >
    >
    > > * SLMR 2.1a * Avoid reality at all costs.
    >
    > > ---
    > > � Synchronet � CAPCITY2 * capcity2.synchro.net *
    > > Telnet/SSH:2022/Rlogin/HTTP
    >
    > I am talking Windows.
    >
    > I manage multiple mail, s/ftp, im, firewall, and other servers spread
    > out all over the World on a variety of OSes. Most of these are able to
    > send messages to a central syslog server.
    >
    > There's also an IDS system sending syslog alerts.
    >
    > Currently, Synchronet's logs are bundled up by some scripts that forward
    > them to syslog. I would like to remove the delay this introduces to
    > that to, for instance, update my firewall against hack attempts.

    Are you using a Syslog Agent for Windows?

    Do your other Windows applications have built-in syslog support? Are they open source?

    If you know, what format syslog msgs are you/they using: BSD or IETF format?

    Currently I'm using a syslog server my buddy and I wrote in Perl. I've
    used free and commercial Syslog servers for Windows as well. None of
    those were open source, which is what prompted creating our own.

    I have several closed souced commercial Windows applications, as well as numerous Perl applicationes we wrote sending to syslog.

    The Perl syslog server is format agnostic and can deal with IETF or BSD format. I actually run 2 instances, one for each. Only one application currently uses BSD format.

    If you're looking for example code for sending messages, the Perl
    Net::Syslog module has it all and is pretty small.

    ---
    þ Synchronet þ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)