Apache HTTP Server Access File
I have multiple instance of Apache running on one Windows box. I would like to collect the log for each instance. How can I do that? Should I install as many as smartconnector instance of Apache? In addition, I have a connector appliance. Can I install the Apache smartconnector on it and collect logs from several remote Apache?
Re: Apache HTTP Server Access File
Couple of different ways to go after this. You can use a folder follower connector with the Arcsight agent on the local machine, and go after multiple files with one process. Also, you can mount the Apache log directory with CIFS over on the appliance and use the same or the Apache specific connector. By the way, the newer version of the Logger (if that's your destination) allows you to deploy a folder follower receiver directly on the Logger. One more option is to send data over syslog, using apache configuration directive where data is written to both local file and over syslog to an Arcsight syslog connector. Not sure what the specifics are: number of servers, directories, log files, sizes, rotation method, location on the network (local vs not), if all your logs follow a standard format, ownership of the Windows server, etc..