Ok, I finally went ahead and successfully configured rsyslog to forward localX messages to a remote syslog server. The thing is that the files being logged to disk by the detailed log under /var/log/radiusd/radacct were taking a lot of space in my server. Because I had the remote syslog thingy working I just disabled this log to disk, now, there's noting being dumped to /var/log/radiusd/radacct. However, now I have to forward accounting packets to another radius server and in the documentation (yeah, I've read (most of) it :) ) I see the copy-acct-to-home-server virtual server makes use of those log files.... What should I do? - as far as i can understand, I should just suck it up and either enlarge the /var/log partition or just create some sort of external script that purges those files.... wat's the common practice for these cases? Thanks!! On Wed, Feb 6, 2019 at 9:38 PM Alan Buxey <alan.buxey@gmail.com> wrote:
hi,
Btw, I don't know about your business. But, send to an ElasticSearch could be a great way to do analytics. Think about it.
+1 for this. lots of data getting pumped out, easier to search through it etc.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html