Hello, may be anyone familiar with some tool for viewing logs. I mean web-interface based, simple solution. I have developers, and I can't give them access to my Centos servers, but they want to see logs of Apache. I want to give them address like 172.17.17.21/logs and they will be able to watch logs of Apache in browser. I was looking a lot for something like this, but didn't find. Alex. *UPD: *something very simple like phpMemcachedAdmin or familiar to this Thank you. -- *?????, * *???? ????* *+9 72 54 285 952 3* *www.linuxspace.org* <http://www.linuxspace.org> *--* *Best regards.* *Alex Berber* *+9 72 54 285 952 3* *www.linuxspace.org* <http://www.linuxspace.org/>
On 11/18/2014 10:03 AM, Alan Holt wrote:> Hello, > > may be anyone familiar with some tool for viewing logs. > I mean web-interface based, simple solution.you say 'servers': plural, which leads me to think you're doing load balancing or otherwise have multiple servers which seems like another layer to consider for your puzzle.> I have developers, and I can't give them access to my Centos servers, but > they want to see logs of Apache. I want to give them address like > 172.17.17.21/logs and they will be able to watch logs of Apache in browser. > > I was looking a lot for something like this, but didn't find. > Alex. > > *UPD: *something very simple like phpMemcachedAdmin or familiar to this > Thank you.I would consider something like splunk (or more likely one of the free alternatives) and a setup like: (users) ---public interface --> [webserver] -private interface --\ -- for logs-->[splunk/log collector]<----(developers) and make sure there are acls/firewall rules in place to just allow your developers access (http logs may well include some data that you don't want to get out to the public, like if someone implements a cgi as a get instead of a post but has sensitive data included) -- public gpg key id: AE60F64C
On 11/18/2014 7:03 AM, Alan Holt wrote:> I have developers, and I can't give them access to my Centos servers, >developers have to have SOME level of access to the server, no? otherwise how can they test their code?> but > they want to see logs of Apache. I want to give them address like > 172.17.17.21/logs and they will be able to watch logs of Apache in browser.I put the websites under development are in /home/appuser/public_html and the web logs for that vhost in /home/appuser/logs and the appuser account is just an ordinary user, who can log on via ssh, and transfer files with rsync or sftp/scp -- john r pierce 37N 122W somewhere on the middle of the left coast
On Tue, Nov 18, 2014 at 05:03:30PM +0200, Alan Holt (berber.it at gmail.com) wrote:> Hello, > > may be anyone familiar with some tool for viewing logs. > I mean web-interface based, simple solution. > > I have developers, and I can't give them access to my Centos servers, but > they want to see logs of Apache. I want to give them address like > 172.17.17.21/logs and they will be able to watch logs of Apache in browser. > > I was looking a lot for something like this, but didn't find. > Alex. >You could use NFS, exportfs the apache log directory to 127.0.0.1 only, make a directory somewhere accessible to the developers outside the root of the server and mount the apache log directory to that dir READONLY. Alternatively you can change the log directory location in http.conf to somewhere the developers can access it but outside the root of the server. Since apache AND the developers must be able to access it this should be no problem. Jobst -- main(){for (;;) fputc(NULL,rand() % 2);) | |0| | Jobst Schmalenbach, jobst at barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia