Integrating Access Logs with TIBCO LogLogic

Mashery Local supports the ability to send access logs to the TIBCO LogLogic® log management platform. An administrator can configure log processing rules and destinations via Syslog configurations as follows:
  1. Copy the existing syslog configuration:
    filecp /etc/syslog-ng/syslog-ng.conf/etc/syslog-ng/syslog-ng.conf.original
  2. Open the /etc/syslog-ng/syslog-ng.conf file.
  3. Add a new log destination. (Replace the URL and port values, marked bold below, with values appropriate to your TIBCO LogLogic setup.)
    destination d_lmi_accesslog { tcp("lmi.acme.com" port(514)); };
    rewrite r_mashery_lighty{set("mashery_trafficmgr_access", value("PROGRAM"));};
  4. Add a new log processing rule:
    log { source(s_sys); filter(f_lighty); rewrite(r_mashery_lighty); destination(d_lmi_accesslog); };
  5. Restart syslog-ng process
    sudo service syslog-ng restart
    Access logs will now be available in the TIBCO LogLogic log management system.