PF Centralised logging of PF

[wdick]

Hi all,

I am wondering how you gather PF logs from different machines at one centralised point for (later) analysis.
For all syslog / text based logs we use syslog-ng to centralise logging, but I am missing good ideas for pflog files.

Sure I can copy the files, but a more "streaming" solution would be great.

All ideas and experiences are welcome!

Regards,
Waldemar

 

[Alain De Vos]

pflogd is primitive and sends to a file. So you need something which "behaves" like a file ...