Ubuntu and Debian
In the cases of Ubuntu and Debian systems, the procedures related to working with the logtrust-system and logtrust-monitor packages are basically identical. This article covers:
The configuration utilities for the packages are fully described here.
These procedures were tested on Ubuntu 13.x, 12.x, 11.x, and 10.x and Debian 5.x and 6.x.
Installing the packages
You can install these packages by adding them to the repository list or by downloading their .deb files directly.
Install using the repository list
Add the Devo repository to the system repository list using the following commands:
Create a file called logtrust.list in the /etc/apt/sources.list.d/ directory with the following contents:
Update the APT local database, then install the logtrust-system and logtrust-monitor packages using these commands:
You can update these files at any time by repeating the commands used in this step.
Install using package files
Download the logtrust-system and logtrust-monitor packages found here:
Install the packages using the following commands:
Launching the configuration utilities
After installing the packages, start the configuration utilities by using these commands:
For a complete description of the configuration utilities, see the Configuration packages for *nix article.
Uninstalling the packages
You can use either of the APT or dpkg tools to remove the packages from the machine.
Due to a bug in this version of GNuTLS (libgnutls26 package, version 2.12.14), secure connections using TLS/SSL do not work. To address this, we'll apply a later version of the GNuTLS package.
Install a later version of the library:
Force rsyslog to load the new version by adding the following line to the /etc/default/rsyslog configuration file:
Debian Lenny came packaged with an old version of rsyslog that does not support many of the functions that the Devo packages use. To fix this, you can update rsyslog using the Debian Backports repository.
Open /etc/apt/sources.list and confirm that it contains the following lines - add them if they are missing:
deb http://archive.debian.org/debian/ lenny main contrib non-free deb-src http://archive.debian.org/debian/ lenny main contrib non-free deb http://archive.debian.org/debian-security lenny/updates main contrib non-free deb-src http://archive.debian.org/debian-security lenny/updates main contrib non-free deb http://archive.debian.org/debian-volatile lenny/volatile main contrib non-free deb-src http://archive.debian.org/debian-volatile lenny/volatile main contrib non-free deb http://archive.debian.org/debian-backports lenny-backports main
Update rsyslog using the Backports repository: