# Re: syslog lib/module for remote logging

**URL:** <https://www.ruby-forum.com/t/re-syslog-lib-module-for-remote-logging/95470>\
**Category:** Ruby\
**Created:** [June 2, 2006, 10:53am UTC](https://www.ruby-forum.com/t/re-syslog-lib-module-for-remote-logging/95470 "2006-06-02T10:53:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![PeSSSSaS\_Botp](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/ecd19e/32.png) [@PeSSSSaS\_Botp](https://www.ruby-forum.com/u/PeSSSSaS_Botp)\
**Post date:** [June 2, 2006, 10:53am UTC](https://www.ruby-forum.com/t/re-syslog-lib-module-for-remote-logging/95470/1 "2006-06-02T10:53:15Z")

</div>

fr Park:

# You can try something like this:

# 

# require ‘socket’

# require ‘win32/eventlog’

# include Win32

# 

# syslog\_dest = 13

# syslog\_port = 514

# syslog\_server = ‘192.168.123.122’

# 

# s = UDPSocket.new

# EventLog.open(‘Application’).tail{ |log|

# message = "WinEventLog

# #{log.time\_generated.asctime}||#{log.event\_type}||#{log.source

# }||#{log.computer}||#{log.user}||#{log.description}"

# s.send("\<#{syslog\_dest}\>#{message}",0,syslog\_server,syslog\_port)

# }

Sweet.  
But the udp just reminded that i’m sending security logs that i do \_not  
want to miss.

Do you know of any syslog-like module that uses tcp? Is this possible  
using a drb-like framework?

kind regards -botp

---

<div class="post-metadata">

**Author:** ![PeSSSSaS\_Botp](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/ecd19e/32.png) [@PeSSSSaS\_Botp](https://www.ruby-forum.com/u/PeSSSSaS_Botp)\
**Post date:** [June 2, 2006, 1:26pm UTC](https://www.ruby-forum.com/t/re-syslog-lib-module-for-remote-logging/95470/2 "2006-06-02T13:26:46Z")

</div>

remote syslog works on UDP. If you want to use TCP, you’re not going to  
use  
syslog. Two options: 1) examine how likely your system is to drop  
packets.  
UDP usually drops packets in the kernel (either your computers or your  
routers) when the network stack is congested or busy- it’s easy to write  
a  
test program that will make it happen, but quite rare in many local  
networks. (Over the Internet, forget it.) 2) Use a reliable  
message-queueing  
system of some kind.

---

<div class="post-metadata">

**Author:** ![PeSSSSaS\_Botp](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/ecd19e/32.png) [@PeSSSSaS\_Botp](https://www.ruby-forum.com/u/PeSSSSaS_Botp)\
**Post date:** [June 2, 2006, 3:42pm UTC](https://www.ruby-forum.com/t/re-syslog-lib-module-for-remote-logging/95470/3 "2006-06-02T15:42:14Z")

</div>

- Peña, Botp [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) [060602 11:04]:

> But the udp just reminded that i’m sending security logs that i do  
> \_not want to miss.
> 
> Do you know of any syslog-like module that uses tcp? Is this possible  
> using a drb-like framework?

On unix side there are tcp base syslog implementations (see syslog-ng).  
Don’t know if it is possible to use them on MS systems.

Cheers,

Steph.