Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I currently manage a qmail installation, set up on Centos using the qmailrocks guide (which seems to have vanished from the Internet now). So - daemontools, multilog, vpopmail, qmail.

I've been asked to set up a Splunk server for analysing the logs from all our servers, and I can't seem to find any way of making Splunk read multilog messages. I've had a dig around the qmail documentation and found splogger, which is able to log messages to syslog (which Splunk CAN read). So, is there an easy way of replacing multilog with splogger for a qmail installation managed by daemontools, or do I need to completely change how I start qmail?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

Look for the run file in /var/qmail/supervise/qmail-smtpd/log and replace the multilog line with splogger with the appropriate arguments for splogger. Restart qmail-smtpd with the svc -h /serverice/qmail-smtpd command. Make backups of any changed files of course.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.