Logging to syslog (original) (raw)

Theerror_logandaccess_logdirectives support logging to syslog. The following parameters configure logging to syslog:

server= _address_

Defines the address of a syslog server. The address can be specified as a domain name or IP address, with an optional port, or as a UNIX-domain socket path specified after the “unix:” prefix. If port is not specified, the UDP port 514 is used. If a domain name resolves to several IP addresses, the first resolved address is used.

facility= _string_

Sets facility of syslog messages, as defined inRFC 3164. Facility can be one of “kern”, “user”, “mail”, “daemon”, “auth”, “intern”, “lpr”, “news”, “uucp”, “clock”, “authpriv”, “ftp”, “ntp”, “audit”, “alert”, “cron”, “local0”..“local7”. Default is “local7”.

severity= _string_

Sets severity of syslog messages foraccess_log, as defined inRFC 3164. Possible values are the same as for the second parameter (level) of theerror_log directive. Default is “info”.

Severity of error messages is determined by nginx, thus the parameter is ignored in the error_log directive.

tag= _string_

Sets the tag of syslog messages. Default is “nginx”.

nohostname

Disables adding the “hostname” field into the syslog message header (1.9.7).

Example syslog configuration:

error_log syslog:server=192.168.1.1 debug;

access_log syslog:server=unix:/var/log/nginx.sock,nohostname; access_log syslog:server=[2001:db8::1]:12345,facility=local7,tag=nginx,severity=info combined;

Logging to syslog is available since version 1.7.1. As part of ourcommercial subscriptionlogging to syslog is available since version 1.5.3.