Jonathan Gazeley wrote:
I've decided to move logging on my radius boxes to a pair of syslog servers, rather than stored locally. I'm using rsyslog to send the logs over the network.
It's a good tool.
I follow this guide http://wiki.freeradius.org/Syslog_HOWTO but it seems to be for an old version of FreeRADIUS. I have managed to get FreeRADIUS to send syslog packets to my syslog hosts; however I can't tell how to specifically split out the FreeRADIUS syslog packets.
See the "programname" directive in the rsyslog configuration. It will be the name of the daemon (radiusd or freeradiusd)
The wiki page suggests local1.* but this isn't matching the right packets. I'm running FreeRADIUS 2.1.6 so if anyone has a snippet of their rsyslog.conf or can simply say how to match the radius syslog packets, I'd be very grateful.
Once you get it working, send it to the list, and we'll add it to the next release. Alan DeKok.