Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Due to compliance issues, there is a need to store all tomcat logs for at least 6 months on a central server.

Is there a way to send the logs to rsyslog server or any other mechanism that will accomplish the task. I tried changing CATALINA_OUT to /var/log/syslog, and it does record it in the file however rsyslog-mysql does not pick it up.

Short of sending the logs to a remote host, what are some ways to move the logs automatically besides using rsync, cron, scp

share|improve this question

Here is an interesting thread about your question. If this really leads to a solution is not sure. A working approach is to output to stdout and pipe that to logger - but this is not a "clean" solution.

share|improve this answer
The linked thread is not related in any way to stdout/stderr. But the logger approach is sound and I don't see anything unclean about it. Bonus points would be for somehow redirecting the damn AccessLogValve (localhost_access_log file). – kubanczyk Nov 8 '15 at 12:23

Check out Splunk

Here is some information about how you can set archive policies:

I'm not sure what kind of compliance you are trying to meet but Splunk has some great plugins - ex:




share|improve this answer

Splunk!? That thing is so expensive. It's a good Thing, but an expensive one.

What you might get more of a kick out of is something like Logstash, or Graylog2

Logstash will pretty much do exactly what you want. It has an agent that can tail logfiles.

I wonder though.. What would happen if you pointed the catalina.out log entry at a FIFO pipe, then piped that through logger (which writes to syslog)

share|improve this answer

Check out this

  • logstash : opensource tool for managing events and logs
  • kibana : opensource tool for visualizing logs and time-stamped data
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.