分类： LINUX
2008-03-03 21:21:57
The syslog-ng Premium Edition application has three distinct modes of operation: Client, Server, and Relay. The syslog-ng application running on a host determines the mode of operation automatically based on the license and the configuration file.
# 注释 ：syslog-ng PE 版本有3中不同的工作模式 ：client、relay、server 。
# syslog-ng 会自动根据 license 文件和配置文件来自动判断其工作模式
![[Note]](183_files/note%5B1%5D.png) |
Note |
|---|---|
|
Microsoft Windows based hosts can run only the syslog-ng agent. The syslog-ng agent operates only in client mode. |
In client mode, syslog-ng collects the local logs generated by the host and forwards them through a network connection to the central syslog-ng server or to a relay. Clients can also log the messages locally into files.
No license file is required to run syslog-ng in client mode.
# 注释 ：在 client 模式下，syslog-ng client 端收集本地日志，并通过网路连接转发到 syslog-ng 服务器或者 syslog-ng 中继。
# client 端也可以把日志记录到本地。在 client 模式下的 syslog-ng 不需要 license 文件
2.3.2. Relay mode
In relay mode, syslog-ng receives logs through the network from syslog-ng clients and forwards them to the central syslog-ng server using a network connection. Relays can also log the messages from the relay host into a local file, or forward these messages to the central syslog-ng server.
# 注释 ：在中继模式下，syslog-ng 从多个 syslog-ng 客户机收集日志并转发到一个中央日志服务器。
# 同时 syslog-ng 中继本身的日志也可以记录到本地或者发送到日志服务器
Relays cannot write messages received from the network into local files, only buffer the messages to the hard disk when disk-based buffering is used.
# 注释 ：syslog-ng 中继不可以把从 syslog-ng 客户端收到的消息写入本地文件，除非是需要用到基于磁盘的缓冲功能的情况。
# 补充：可以看到，syslog-ng 中继对于来自 syslog-ng 客户端的消息只能转发，不能写入本地文件，但如果是 syslog-ng 中继自身的日志则可以。
No license file is required to run syslog-ng in relay mode.
In server mode, syslog-ng acts as a central log-collecting server. It receives messages from syslog-ng clients and relays over the network, and stores them locally in files, or passes them to other applications, e.g., log analyzers.
# 注释 ：在 syslog-ng server 模式下，syslog-ng 扮演一个中央日志收集的角色，它从 syslog-ng 和 syslog-relay 接收日志并存储到本地文件，或者传递给其他应用程序（日志分析程序）。
Running syslog-ng Premium Edition in server mode requires a license file. The license determines how many individual hosts can connect to the server.
# 注释 ： syslog-ng PE 版本的 server 模式需要一个 License 文件。它控制了 server 允许接受来自多少台主机的日志
Running syslog-ng Open Source Edition in server mode does not require a license file.
# 注释 ：如果是开源版本的则不需要 license 文件
