NXLog User Guide

56.2. ISC DHCP Client (dhclient)

The ISC DHCP Client, or dhclient, is commonly used on Linux systems for requesting DHCP leases. Like DHCPd, dhclient logs its activity the local Syslog logger (daemon facility). See Collecting and Parsing Syslog for general information about collecting Syslog logs.

Example 230. Collecting dhclient Messages

This configuration uses the im_file module to read dhclient messages from one of the Syslog log files, and the xm_syslog parse_syslog() procedure to parse them. Only events from the dhclient source are kept; others are discarded with drop().

Warning

This method will most likely not preserve severity information. See Reading Syslog Log Files for more information and the other sections in Collecting and Parsing Syslog for alternative ways to collect Syslog messages.

nxlog.conf


  1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

  <Extension _syslog>
    Module  xm_syslog
</Extension>

<Input dhcp_client>
    Module  im_file
    # Debian writes `daemon` facility logs to `/var/log/daemon.log` by default
    File    '/var/log/daemon.log'
    # RHEL writes `daemon` facility logs to `/var/log/messages` by default
    #File    '/var/log/messages'
    <Exec>
        parse_syslog();
        if $SourceName != 'dhclient' drop();
    </Exec>
</Input>