Logging to (r)syslog from Shib v3 via logback

[Mark Cairney]

Hi,

I'm trying (without a great deal of luck) to get Shibboleth 3 to send
it's logs to rsyslog in addition to the standard logging to
/opt/shibboleth-idp/logs so it can then be send to our central rsyslog
servers and processed with logstash etc.

In my logback.xml I've added the following after consulting

https://wiki.shibboleth.net/confluence/display/IDP30/LoggingConfiguration
and
http://logback.qos.ch/manual/appenders.html

Above IDP_PROCESS:

    <!-- Syslog -->
      <appender name="SYSLOG"
class="ch.qos.logback.classic.net.SyslogAppender">
    <syslogHost>localhost</syslogHost>
    <facility>LOCAL5</facility>
    <suffixPattern>%date{ISO8601} - %level [%logger:%line] -
%msg%n%ex{short}</suffixPattern>
  </appender>

And at the bottom in the root stanza:
        <appender-ref ref="SYSLOG" />

and in my rsyslog.conf I have:
# Send Shib logs remotely
local5.* @server1
local5.* @server2
local5.* /var/log/shib.log

However I don't see anything appearing in /var/log/shib.log or on the
the remote servers

Has anyone got this working successfully who can point out where I'm
going wrong?

I've tried running rsyslogd in debug mode with the -dn flag but haven't
spotted anything worth reporting. The tomcat instance is running as the
tomcat user in case that's relevant.
-- 
/****************************

Mark Cairney
ITI Enterprise Services
Information Services
University of Edinburgh

Tel: 0131 650 6565
Email: Mark.Cairney at ed.ac.uk
PGP: 0x435A9621

*******************************/

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/users/attachments/20160908/5383cee0/attachment-0001.sig>