8 Bit Pipe

Well, I tried to find a howto on parsing NGINX with logwatch, but I found content lacking. So I decided to create my own. There is a small caveat, this is for the CentOS RPM install of NGINX; your files may reside in different places.

1. copy the logfile conf for httpd to nginx located in /usr/share/logwatch/default.conf/logfiles/

# cp httpd.conf nginx.conf

2. Modify the nginx.conf file to use the files in /var/log/nginx (Note: logwatch already knows /var/log/ as the LogPath). You can modify the conf file to look as such:

########################################################
# Define log file group for nginx
########################################################

# What actual file? Defaults to LogPath if not absolute path….
LogFile = nginx/*access.log

# If the archives are searched, here is one or more line
# (optionally containing wildcards) that tell where they are…
#If you use a “-” in naming add that as well -mgt
Archive = nginx/*access.log*

# Expand the repeats (actually just removes them now)
*ExpandRepeats

# Keep only the lines in the proper date range…
*ApplyhttpDate

# vi: shiftwidth=3 tabstop=3 et

3, copy the services conf for httpd to nginx located in /usr/share/logwatch/default.conf/services/

# cp http.conf nginx.conf

4. Modify the nginx.conf so that the head of the file looks like such:

###########################################################################
# Configuration file for nginx filter
###########################################################################

Title = “nginx”

# Which logfile group…
LogFile = nginx

5. copy service file for http to nginx located in /usr/share/logwatch/scripts/services

# cp http nginx

6. Run Logwatch

# /usr/sbin/logwatch

This entry was posted on Friday, July 29th, 2011 at 1:48 pm and is filed under Nginx. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.