Embedded Install - Logs to internal / external HD
-
Apologies if this has been answered elsewhere but my searches didn't reveal any relevant info.
I have an embedded install on a 4GB CF card installed in my XTM5 and I'd like to send output of syslog, snort, and IPLOGs from StrikeBack to an internal/external HD.
Output from IPLOG from strikeback has very quickly filled up my filesystem causing annoying/unexpected behavior. (Love the fact PFSense is chugging along despite this condition that crashes many other systems)
Could anyone point me in the direction of doing this?
I have both USB and internal SATA ports so preferably I'd like to use the internal ports with a 2.5inch laptop HD.
-
It's not straight forward but people have done it. Probably the easiest way to do this is to run a syslog server locally. This means the pfSense logging code remains standard. I believe someone created a package to do this with syslog-ng.
Steve
Edit: Yes, it's here but only available for 2.1 for now.
