byp4a55 professor6T9

Linux SamCT211 4.4.302+ #86009 SMP Wed Nov 26 18:19:20 CST 2025 x86_64
nginx/1.23.1
192.168.4.211

syslog_server_util.sh

#!/bin/bash

. /var/packages/LogCenter/target/service/scripts/cluster/syslog_cluster_util.sh
. /var/packages/LogCenter/target/service/scripts/cluster/syslog_cluster_server_util.sh

BIN_GET_SKV=/usr/syno/bin/get_section_key_value
SYSLOGNG_TEMPLATE_SRC=${SYSLOGNG_CUSTRULE_TEMPLATE_FOLDER}/src.template
SYSLOGNG_TEMPLATE_PARSER=${SYSLOGNG_CUSTRULE_TEMPLATE_FOLDER}/parser.template
SYSLOGNG_TEMPLATE_PATTERN_DB=${SYSLOGNG_CUSTRULE_TEMPLATE_FOLDER}/pattern.template
SYSLOGNG_FOLDER_PATTERN_DB_XML=${LOGCENTER_TARGET}/usr/syno/etc/synosyslog/patterndb/

SYSLOGNG_REWRITE_REMOTE_USERNAME="r_syno_remote_username"
SYSLOGNG_REWRITE_REMOTE_MSG="r_syno_local_msg"
SYSLOGNG_REWRITE_REMOTE_XFER="r_syno_remote_transfer"
SYSLOGNG_PARSER_BSD_SYS="r_syno_bsd_general_parser"
SYSLOGNG_PARSER_BSD_CON="r_syno_bsd_connection_parser"
SYSLOGNG_PARSER_BSD_XFER="r_syno_bsd_transfer_parser"

SYSLOGNG_DEST_REMOTE_ARCH="d_syno_arch_all_device_db"
SYSLOGNG_DEST_REMOTE_SYS="d_syno_general_all_device_db"
SYSLOGNG_DEST_REMOTE_CON="d_syno_connection_all_device_db"
SYSLOGNG_DEST_REMOTE_XFER="d_syno_transfer_all_device_db"

########################
SyslogServerSettingGet(){
    SYSLOGNG_SERVER_ARCH_DEST=$(/bin/get_key_value "${SYSLOGNG_SERVER_SETTING}" arch_dest)
    SYSLOGNG_SERVER_ARCH_BYDEVICE=$(/bin/get_key_value "${SYSLOGNG_SERVER_SETTING}" arch_by_device)

if [ "" = "${SYSLOGNG_SERVER_ARCH_DEST}" ];then
        exit 0
    fi
    if [ ! -e "${SYSLOGNG_SERVER_ARCH_DEST}" ];then
        echo "(${LOCALARCH_DEST}) does not exist!";
        exit 1
    fi

SYSLOGNG_SERVER_IETF_IPTYPE_4=true
    SYSLOGNG_SERVER_IETF_IPTYPE_6=IsIPv6Configured
    if [ "${SYSLOGNG_SERVER_ARCH_BYDEVICE}" -eq 1 ];then
        SYSLOGNG_SERVER_DST_ALL_DB="${SYSLOGNG_SERVER_ARCH_DEST}/\${HOST}/SYNOSYSLOGDB_\${HOST}.DB"
        SYSLOGNG_SERVER_DST_SYS_DB="${SYSLOGNG_SERVER_ARCH_DEST}/\${HOST}/SYNOSYSLOGDB_\${HOST}_SYS"
        SYSLOGNG_SERVER_DST_CON_DB="${SYSLOGNG_SERVER_ARCH_DEST}/\${HOST}/SYNOSYSLOGDB_\${HOST}_CON"
        SYSLOGNG_SERVER_DST_XFER_DB="${SYSLOGNG_SERVER_ARCH_DEST}/\${HOST}/SYNOSYSLOGDB_\${HOST}_XFER"
    else
        SYSLOGNG_SERVER_DST_ALL_DB="${SYSLOGNG_SERVER_ARCH_DEST}/SYNOSYSLOGDB__ARCH.DB"
        SYSLOGNG_SERVER_DST_SYS_DB="${SYSLOGNG_SERVER_ARCH_DEST}/SYNOSYSLOGDB__ARCH_SYS"
        SYSLOGNG_SERVER_DST_CON_DB="${SYSLOGNG_SERVER_ARCH_DEST}/SYNOSYSLOGDB__ARCH_CON"
        SYSLOGNG_SERVER_DST_XFER_DB="${SYSLOGNG_SERVER_ARCH_DEST}/SYNOSYSLOGDB__ARCH_XFER"
    fi
    local TLS_PROFILE
    TLS_PROFILE=$(/bin/cat /usr/syno/etc/security-profile/tls-profile/config/LogCenter.conf | sed ':a;N;$!ba;s/\n/ /g' | sed 's/^[ ]*//;s/[ ]*$//')
    SYSLOGNG_SERVER_TLS="tls(key_file(\"/var/packages/LogCenter/etc/keys/ca.key\") cert_file(\"/var/packages/LogCenter/etc/keys/ca.crt\") peer_verify(optional-untrusted) $TLS_PROFILE)"
    SYSLOGNG_SERVER_BIND_IPv4="0.0.0.0"
    SYSLOGNG_SERVER_BIND_IPv6="::"
}
####################################################

RecvRuleConfigGen(){
    if HCIIsSupport ;then
        if HCIIsController ;then
            ClusterSyslogServerSettingGet
            RecvRuleConfPreGen
            ClusterRecvRuleConfGen
        elif HCIIsAgent ;then
            RecvRuleConfDataClear
            exit 1
        else
            RecvRuleConfDataClear
            echo "hci role isn't ready!"
            exit 1
        fi
    elif FSDNIsSupport ;then
        ClusterSyslogServerSettingGet
        RecvRuleConfPreGen
        ClusterRecvRuleConfGen
    elif [ -f "${SYSLOGNG_SERVER_SETTING}" ];then
        SyslogServerSettingGet
        RecvRuleConfPreGen
        RecvRuleConfGen
        EscapeRuleGen
    else
        echo "Syslog server setting file does not exist!"
        exit 1
    fi
}

RecvRuleConfigClr(){
    RecvRuleConfDataClear
}

########################
RecvRuleConfDataInit() {
    RecvRuleConfDataClear
    touch "${SYSLOGNG_CONFIG_RECVRULE}"
}

RecvRuleConfDataClear() {
    rm -rf "${SYSLOGNG_CONFIG_RECVRULE}" > /dev/null 2>&1
}

RecvRuleConfPreGen() {
    RecvRuleConfDataInit
    IetfFilterProcess
    CommonRewriteProcess
}

#XXX: remove me after depending on DSM 7.3
EscapeRuleGen() {
    if [ -f /etc.defaults/syslog-ng/syno.d/base.conf ];then
        return
    fi
    echo "rewrite r_syno_escape_double_quote{subst(\"\x22\",\"\",value(\"PROGRAM\"),flags(\"global\"));subst(\"\x22\", \"\",value(\"MESSAGE\"),flags(\"global\"));};" >> "${SYSLOGNG_CONFIG_RECVRULE}"
    echo "rewrite r_syno_escape_backslash{subst(\"\\\\\\\\\",\"\",value(\"PROGRAM\"),flags(\"global\"));subst(\"\\\\\\\\\", \"\",value(\"MESSAGE\"),flags(\"global\"));};" >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

RecvRuleConfGen() {
    # for each section, read config and gen one rule
    local RULE_SECS
    RULE_SECS=$(grep '^\[.*\]$' "${SYSLOGNG_RECVRULE_SETTING}" | sed 's|^\[$.*$]$|\1|g')
    local RULE

for RULE in ${RULE_SECS}
    do
        RULE_NAME=${RULE}
        RULE_FORMAT=$(${BIN_GET_SKV} "${SYSLOGNG_RECVRULE_SETTING}" "${RULE_NAME}" format)
        RULE_ENABLE=$(${BIN_GET_SKV} "${SYSLOGNG_RECVRULE_SETTING}" "${RULE_NAME}" enable)
        RULE_PROTOCOL=$(${BIN_GET_SKV} "${SYSLOGNG_RECVRULE_SETTING}" "${RULE_NAME}" protocol)
        RULE_PORT=$(${BIN_GET_SKV} "${SYSLOGNG_RECVRULE_SETTING}" "${RULE_NAME}" port)
        RULE_SSL=$(${BIN_GET_SKV} "${SYSLOGNG_RECVRULE_SETTING}" "${RULE_NAME}" ssl)
        if [ "bsd" = "${RULE_FORMAT}" ];then
            BSDSingleRuleGen
        elif [ "ietf" = "${RULE_FORMAT}" ];then
            IETFSingleRuleGen
        else
            CustomSingleRuleGen
        fi
    done
}

CommonRewriteProcess() {
    {
        sed -e "s=__SYNO_REWRITE_NAME__=${SYSLOGNG_REWRITE_REMOTE_USERNAME}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/rewrite_username.template"
        sed -e "s=__SYNO_REWRITE_NAME__=${SYSLOGNG_REWRITE_REMOTE_MSG}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/rewrite_msg.template"
        sed -e "s=__SYNO_REWRITE_NAME__=${SYSLOGNG_REWRITE_REMOTE_XFER}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/rewrite_transfer.template"
    } >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

BSDSingleRuleGen() {
    if [ "yes" != "${RULE_ENABLE}" ];then
        return
    fi

BsdSourceProcess
    BsdFilterProcess
    BsdParserProcess
    BsdDestProcess
    BsdLogProcess
}

BsdSourceProcess(){
    local TEMPLATE_FILE=${SYSLOGNG_SERVER_TEMPLATE_FOLDER}/src.template
    local SOCKET_BUFFER=$(($(cat /proc/sys/net/core/rmem_max) * 2))
    local TRANSPORT="udp"
    local TLS_RULE=""

#for VDSM
    if [ -z "${SOCKET_BUFFER}" ];then
        SOCKET_BUFFER="4194304"
    fi

if [ "tcp" = "${RULE_PROTOCOL}" ];then
        TRANSPORT="tcp"
        if [ "yes" = "${RULE_SSL}" ];then
            TRANSPORT="tls"
            TLS_RULE=${SYSLOGNG_SERVER_TLS}
        fi
    fi

sed -e "s/__SYNO_SRCNAME__/bsd_${RULE_NAME}/" \
        -e "s/__SYNO_PERSIST_NAME__/bsd_${RULE_NAME}/" \
        -e "s/__SYNO_SRCTYPE__/network/" \
        -e "s/__SYNO_ANYADDR__/\"0.0.0.0\"/" \
        -e "s/__SYNO_TRANSPORT__/${TRANSPORT}/" \
        -e "s/__SYNO_PORT__/${RULE_PORT}/" \
        -e "s/__SYNO_IPV__/4/" \
        -e "s=__SYNO_CA_SETTING__=${TLS_RULE}=" \
        -e "s/__SYNO_SOCKBUF__/${SOCKET_BUFFER}/" \
        "${TEMPLATE_FILE}" \
        >> "${SYSLOGNG_CONFIG_RECVRULE}"

if ! IsIPv6Configured ;then
        echo "source s_syno_bsd_${RULE_NAME}_6 {};" >> "${SYSLOGNG_CONFIG_RECVRULE}"
        return
    fi

sed -e "s/__SYNO_SRCNAME__/bsd_${RULE_NAME}_6/" \
        -e "s/__SYNO_PERSIST_NAME__/bsd_${RULE_NAME}_6/" \
        -e "s/__SYNO_SRCTYPE__/network/" \
        -e "s/__SYNO_ANYADDR__/\"::\"/" \
        -e "s/__SYNO_TRANSPORT__/${TRANSPORT}/" \
        -e "s/__SYNO_PORT__/${RULE_PORT}/" \
        -e "s/__SYNO_IPV__/6/" \
        -e "s=__SYNO_CA_SETTING__=${TLS_RULE}=" \
        -e "s/__SYNO_SOCKBUF__/${SOCKET_BUFFER}/" \
        "${TEMPLATE_FILE}" \
        >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

BsdFilterProcess() {
    {
        echo "filter f_syno_bsd_general { program(\"^System$\"); };"
        echo "filter f_syno_bsd_connection { program(\"^Connection$\"); };"
        echo \
"filter f_syno_bsd_transfer {
    program(\"^FtpFileTransfer$\") or
    program(\"^TFtpFileTransfer$\")or
    program(\"^FileStation$\") or
    program(\"^Webdav$\") or
    program(\"^WinFileService$\") or
    program(\"^MacFileService$\");
};"
    } >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

BsdParserProcess() {
    {
        sed -e "s=__SYNO_PARSER_NAME__=${SYSLOGNG_PARSER_BSD_SYS}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/parser_general.template"
        sed -e "s=__SYNO_PARSER_NAME__=${SYSLOGNG_PARSER_BSD_CON}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/parser_connection.template"
        sed -e "s=__SYNO_PARSER_NAME__=${SYSLOGNG_PARSER_BSD_XFER}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/parser_transfer.template"
    } >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

BsdDestProcess(){
    {
        sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_ARCH}=" \
            -e "s=__SYNO_DB_PATH__=${SYSLOGNG_SERVER_DST_ALL_DB}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db.template"
        sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_SYS}=" \
            -e "s=__SYNO_DB_PATH__=${SYSLOGNG_SERVER_DST_SYS_DB}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db_general.template"
        sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_CON}=" \
            -e "s=__SYNO_DB_PATH__=${SYSLOGNG_SERVER_DST_CON_DB}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db_connection.template"
        sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_XFER}=" \
            -e "s=__SYNO_DB_PATH__=${SYSLOGNG_SERVER_DST_XFER_DB}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db_transfer.template"
    } >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

BsdLogSourceGet() {
    local source="source(s_syno_bsd_${RULE_NAME});"
    if IsIPv6Configured; then
        source+="source(s_syno_bsd_${RULE_NAME}_6);"
    fi
    echo "$source"
}

BsdLogProcess(){
    local source
    source="$(BsdLogSourceGet)"
    {
        echo "log{${source}rewrite(r_syno_escape_backslash);rewrite(r_syno_escape_double_quote);destination(d_syno_dest_recv);flags(flow_control);};"
        echo \
"log {
    ${source}
    destination(${SYSLOGNG_DEST_REMOTE_ARCH});
    flags(flow_control);
};"
        echo \
"log {
    ${source}
    filter(f_syno_bsd_general);
    parser(${SYSLOGNG_PARSER_BSD_SYS});
    destination(${SYSLOGNG_DEST_REMOTE_SYS});
    flags(flow_control);
};"
        echo \
"log {
    ${source}
    filter(f_syno_bsd_connection);
    parser(${SYSLOGNG_PARSER_BSD_CON});
    destination(${SYSLOGNG_DEST_REMOTE_CON});
    flags(flow_control);
};"
        echo \
"log {
    ${source}
    filter(f_syno_bsd_transfer);
    parser(${SYSLOGNG_PARSER_BSD_XFER});
    destination(${SYSLOGNG_DEST_REMOTE_XFER});
    flags(flow_control);
};"
    } >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

IETFSingleRuleGen() {
    if [ "yes" != "${RULE_ENABLE}" ];then
        return
    fi

IetfSourceProcess
    IetfDestProcess
    IetfLogProcess
}

IetfSourceProcess(){
    local TEMPLATE_FILE=${SYSLOGNG_SERVER_TEMPLATE_FOLDER}/src.template
    local SOCKET_BUFFER=$(($(cat /proc/sys/net/core/rmem_max) * 2))
    local TRANSPORT="udp"
    local TLS_RULE=""

if [ -z "${SOCKET_BUFFER}" ];then
        SOCKET_BUFFER="4194304"
    fi

if [ "tcp" = "${RULE_PROTOCOL}" ];then
        TRANSPORT="tcp"
        if [ "yes" = "${RULE_SSL}" ];then
            TRANSPORT="tls"
            TLS_RULE=${SYSLOGNG_SERVER_TLS}
        fi
    fi

if [ "$SYSLOGNG_SERVER_IETF_IPTYPE_4" = true ];then
        sed -e "s/__SYNO_SRCNAME__/ietf_${RULE_NAME}/" \
            -e "s/__SYNO_PERSIST_NAME__/ietf_${RULE_NAME}/" \
            -e "s/__SYNO_SRCTYPE__/syslog/" \
            -e "s/__SYNO_ANYADDR__/\"${SYSLOGNG_SERVER_BIND_IPv4}\"/" \
            -e "s/__SYNO_TRANSPORT__/${TRANSPORT}/" \
            -e "s/__SYNO_PORT__/${RULE_PORT}/" \
            -e "s/__SYNO_IPV__/4/" \
            -e "s=__SYNO_CA_SETTING__=${TLS_RULE}=" \
            -e "s/__SYNO_SOCKBUF__/${SOCKET_BUFFER}/" \
            "${TEMPLATE_FILE}" \
            >> "${SYSLOGNG_CONFIG_RECVRULE}"
    else
        echo "source s_syno_ietf_${RULE_NAME} {};" >> "${SYSLOGNG_CONFIG_RECVRULE}"
    fi
    if [ "$SYSLOGNG_SERVER_IETF_IPTYPE_6" = true ];then
        sed -e "s/__SYNO_SRCNAME__/ietf_${RULE_NAME}_6/" \
            -e "s/__SYNO_PERSIST_NAME__/ietf_${RULE_NAME}_6/" \
            -e "s/__SYNO_SRCTYPE__/syslog/" \
            -e "s/__SYNO_ANYADDR__/\"${SYSLOGNG_SERVER_BIND_IPv6}\"/" \
            -e "s/__SYNO_TRANSPORT__/${TRANSPORT}/" \
            -e "s/__SYNO_PORT__/${RULE_PORT}/" \
            -e "s/__SYNO_IPV__/6/" \
            -e "s=__SYNO_CA_SETTING__=${TLS_RULE}=" \
            -e "s/__SYNO_SOCKBUF__/${SOCKET_BUFFER}/" \
            "${TEMPLATE_FILE}" \
            >> "${SYSLOGNG_CONFIG_RECVRULE}"
    else
        echo "source s_syno_ietf_${RULE_NAME}_6 {};" >> "${SYSLOGNG_CONFIG_RECVRULE}"
    fi
}

GeneralFilterProcess(){
    echo "filter f_syno_general { match('^System$' value('.SDATA.synolog@6574.synotype'));};" \
    >> "${SYSLOGNG_CONFIG_RECVRULE}"
}
ConnectionFilterProcess(){
    echo "filter f_syno_connection { match('^Connection$' value('.SDATA.synolog@6574.synotype'));};" \
    >> "${SYSLOGNG_CONFIG_RECVRULE}"
}
TransferFilterProcess(){
    {
        echo "filter f_syno_ftpxfer {match('^FtpFileTransfer$' value('.SDATA.synolog@6574.synotype'));};"
        echo "filter f_syno_fsxfer {match('^FileStation$' value('.SDATA.synolog@6574.synotype'));};"
        echo "filter f_syno_fbxfer {match('^FileBrowser$' value('.SDATA.synolog@6574.synotype'));};"
        echo "filter f_syno_webdavxfer {match('^Webdav$' value('.SDATA.synolog@6574.synotype'));};"
        echo "filter f_syno_cifsxfer {match('^WinFileService$' value('.SDATA.synolog@6574.synotype'));};"
        echo "filter f_syno_afpxfer {match('^MacFileService$' value('.SDATA.synolog@6574.synotype'));};"
        echo "filter f_syno_tftpxfer {match('^TFtpFileTransfer$' value('.SDATA.synolog@6574.synotype'));};"
	echo "filter f_syno_transfer {filter(f_syno_ftpxfer) or filter(f_syno_fsxfer) or filter(f_syno_fbxfer) or filter(f_syno_webdavxfer) or filter(f_syno_cifsxfer) or filter(f_syno_afpxfer) or filter(f_syno_tftpxfer)};"
    } >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

IetfFilterProcess(){
    GeneralFilterProcess
    ConnectionFilterProcess
    TransferFilterProcess
}

IetfDestProcess(){
    if [ -n "$SYSLOGNG_SERVER_DST_ALL_DB" ];then
        sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_ARCH}=" \
            -e "s=__SYNO_DB_PATH__=${SYSLOGNG_SERVER_DST_ALL_DB}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db.template" >> "${SYSLOGNG_CONFIG_RECVRULE}"
    fi
    sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_SYS}=" \
        -e "s=__SYNO_DB_PATH__=${SYSLOGNG_SERVER_DST_SYS_DB}=" \
        "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db_general.template" >> "${SYSLOGNG_CONFIG_RECVRULE}"
    if [ -n "$SYSLOGNG_SERVER_DST_CON_DB" ];then
        sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_CON}=" \
            -e "s=__SYNO_DB_PATH__=${SYSLOGNG_SERVER_DST_CON_DB}=" \
            "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db_connection.template" >> "${SYSLOGNG_CONFIG_RECVRULE}"
    fi
    sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_XFER}=" \
        -e "s=__SYNO_DB_PATH__=${SYSLOGNG_SERVER_DST_XFER_DB}=" \
        "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db_transfer.template" >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

ietfLogSourceGet() {
    local source=''
    if [ "$SYSLOGNG_SERVER_IETF_IPTYPE_4" = true ];then
        source="source(s_syno_ietf_${RULE_NAME});"
    fi
    if [ "$SYSLOGNG_SERVER_IETF_IPTYPE_6" = true ];then
        source+="source(s_syno_ietf_${RULE_NAME}_6);"
    fi
    echo "$source"
}

IetfPipeLogProcess() {
    echo "log{$(ietfLogSourceGet)rewrite(r_syno_escape_backslash);rewrite(r_syno_escape_double_quote);destination(d_syno_dest_recv);flags(flow_control);};" \
        >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

IetfArchLogProcess() {
    #main database
    if [ -n "$SYSLOGNG_SERVER_DST_ALL_DB" ];then
        echo \
"log {
    $(ietfLogSourceGet)
    rewrite(${SYSLOGNG_REWRITE_REMOTE_USERNAME});
    destination(${SYSLOGNG_DEST_REMOTE_ARCH});
    flags(flow_control);
};" >> "${SYSLOGNG_CONFIG_RECVRULE}"
    fi

echo \
"log {
    $(ietfLogSourceGet)
    filter(f_syno_general);
    rewrite(${SYSLOGNG_REWRITE_REMOTE_USERNAME});
    rewrite(${SYSLOGNG_REWRITE_REMOTE_MSG});
    destination(${SYSLOGNG_DEST_REMOTE_SYS});
    flags(flow_control);
};" >> "${SYSLOGNG_CONFIG_RECVRULE}"

if [ -n "$SYSLOGNG_SERVER_DST_CON_DB" ];then
        echo \
"log {
    $(ietfLogSourceGet)
    filter(f_syno_connection);
    rewrite(${SYSLOGNG_REWRITE_REMOTE_USERNAME});
    rewrite(${SYSLOGNG_REWRITE_REMOTE_MSG});
    destination(${SYSLOGNG_DEST_REMOTE_CON});
    flags(flow_control);
};" >> "${SYSLOGNG_CONFIG_RECVRULE}"
    fi

echo \
"log {
    $(ietfLogSourceGet)
    filter(f_syno_transfer);
    rewrite(${SYSLOGNG_REWRITE_REMOTE_USERNAME});
    rewrite(${SYSLOGNG_REWRITE_REMOTE_XFER});
    destination(${SYSLOGNG_DEST_REMOTE_XFER});
    flags(flow_control);
};" >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

IetfLogProcess(){
    IetfPipeLogProcess
    IetfArchLogProcess
}

CustomSingleRuleGen() {
    if [ "yes" != "${RULE_ENABLE}" ];then
        return
    fi

CustomSourceProcess
    CustomDestProcess
    CustomParserProcess
    CustomLogProcess
}

CustomSourceProcess() {
    local SOCKET_BUFFER
    SOCKET_BUFFER=$(awk '{print $3}' /proc/sys/net/ipv4/tcp_wmem)
    local PROTOCOL="udp"
    local TLS_RULE=""

if [ -z "${SOCKET_BUFFER}" ];then
        SOCKET_BUFFER="4194304"
    fi

if [ "tcp" = "${RULE_PROTOCOL}" ];then
        PROTOCOL="tcp"
        if [ "yes" = "${RULE_SSL}" ];then
            PROTOCOL="tls"
            TLS_RULE=${SYSLOGNG_SERVER_TLS}
        fi
    fi

sed -e "s/__SYNO_SRCNAME__/cust_${RULE_NAME}/" \
        -e "s/__SYNO_PERSIST_NAME__/cust_${RULE_NAME}/" \
        -e "s/__SYNO_SRCTYPE__/network/" \
        -e "s/__SYNO_ANYADDR__/\"0.0.0.0\"/" \
        -e "s/__SYNO_TRANSPORT__/${PROTOCOL}/" \
        -e "s/__SYNO_PORT__/${RULE_PORT}/" \
        -e "s/__SYNO_IPV__/4/" \
        -e "s=__SYNO_CA_SETTING__=${TLS_RULE}=" \
        -e "s/__SYNO_SOCKBUF__/${SOCKET_BUFFER}/" \
        "${SYSLOGNG_TEMPLATE_SRC}" \
        >> "${SYSLOGNG_CONFIG_RECVRULE}"

if ! IsIPv6Configured ;then
        return
    fi

sed -e "s/__SYNO_SRCNAME__/cust_${RULE_NAME}_6/" \
        -e "s/__SYNO_PERSIST_NAME__/cust_${RULE_NAME}_6/" \
        -e "s/__SYNO_SRCTYPE__/network/" \
        -e "s/__SYNO_ANYADDR__/\"::\"/" \
        -e "s/__SYNO_TRANSPORT__/${PROTOCOL}/" \
        -e "s/__SYNO_PORT__/${RULE_PORT}/" \
        -e "s/__SYNO_IPV__/6/" \
        -e "s=__SYNO_CA_SETTING__=${TLS_RULE}=" \
        -e "s/__SYNO_SOCKBUF__/${SOCKET_BUFFER}/" \
        "${SYSLOGNG_TEMPLATE_SRC}" \
        >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

CustomDestProcess(){
    local DB_PATH
    if [ "${SYSLOGNG_SERVER_ARCH_BYDEVICE}" -eq 1 ];then
        DB_PATH="${SYSLOGNG_SERVER_ARCH_DEST}/\${HOST}/SYNOSYSLOGDB_\${HOST}.DB"
    else
        DB_PATH="${SYSLOGNG_SERVER_ARCH_DEST}/SYNOSYSLOGDB__ARCH.DB"
    fi

sed -e "s=__SYNO_DEST_NAME__=${SYSLOGNG_DEST_REMOTE_ARCH}=" \
        -e "s=__SYNO_DB_PATH__=${DB_PATH}=" \
        "${SYSLOGNG_ARCHIVE_TEMPLATE_FOLDER}/dest_arch_db.template" >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

CustomParserProcess() {
    local PATTERN_DB_FILE=${RULE_NAME}".xml"
    local MD5
    MD5=$(date | openssl md5 | awk '{print $2}')

# 1. generate pattern db file, put it in "${LOGCENTER_TARGET}/usr/syno/etc/synosyslog/patterndb/<name>.xml"
    #    the pattern needs to overwrite following macro for Synology Log Center if necessary
    #
    #      $YEAR $MONTH $DAY $HOUR $MIN $SEC
    #      $HOSTNAME $PROGRAM $FACILITY $PRIORITY $MSGONLY
    #

rm -rf "${SYSLOGNG_FOLDER_PATTERN_DB_XML}${PATTERN_DB_FILE}" > /dev/null 2>&1
    mkdir -p "${SYSLOGNG_FOLDER_PATTERN_DB_XML}"
    touch "${SYSLOGNG_FOLDER_PATTERN_DB_XML}${PATTERN_DB_FILE}"
    ESCAPED_XML_RULE_FORMAT=$(echo "$RULE_FORMAT" | sed 's/&/\&amp;/g; s/</\&lt;/g; s/>/\&gt;/g; s/"/\&quot;/g; s/'"'"'/\&apos;/g')
    sed -e "s/__SYNO_ID__/${RULE_NAME}/" \
        -e "s/__SYNO_PATTERNDB_RULE__/${ESCAPED_XML_RULE_FORMAT//&/\\&}/" \
        -e "s/__SYNO_MD5__/${MD5}/" \
        "${SYSLOGNG_TEMPLATE_PATTERN_DB}" \
        >> "${SYSLOGNG_FOLDER_PATTERN_DB_XML}${PATTERN_DB_FILE}"

# 2. create rule to use the pattern
    #
    #      parser p_parser_<name> {
    #          db_parser(
    #              file("${LOGCENTER_TARGET}/usr/syno/etc/synosyslog/patterndb/<name>.xml")
    #          );
    #      };
    #

sed -e "s/__SYNO_NAME__/${RULE_NAME}/" \
        -e "s/__SYNO_PATTERNDB_FILE__/${PATTERN_DB_FILE}/" \
        "${SYSLOGNG_TEMPLATE_PARSER}" \
        >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

CustomLogProcess() {
    local inet6_source=''
    if IsIPv6Configured ;then
        inet6_source="source(s_syno_cust_${RULE_NAME}_6)"
    fi

echo "log{source(s_syno_cust_${RULE_NAME});${inet6_source};parser(p_parser_${RULE_NAME});rewrite(r_syno_escape_backslash);rewrite(r_syno_escape_double_quote);destination(d_syno_dest_recv);flags(flow_control);};" \
        >> "${SYSLOGNG_CONFIG_RECVRULE}"
    echo "log{source(s_syno_cust_${RULE_NAME});${inet6_source};parser(p_parser_${RULE_NAME});rewrite(${SYSLOGNG_REWRITE_REMOTE_USERNAME});destination(${SYSLOGNG_DEST_REMOTE_ARCH});flags(flow_control);};" \
        >> "${SYSLOGNG_CONFIG_RECVRULE}"
}

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	0/0	0755	2025-09-24 06:24:30
..	dir	-	0/0	0755	2025-09-24 06:24:30
cert	dir	-	0/0	0755	2025-09-24 06:15:36
cluster	dir	-	0/0	0755	2025-09-24 06:15:40
patch	dir	-	0/0	0755	2025-09-24 06:15:36
systemd	dir	-	0/0	0755	2025-09-24 06:15:40
tls	dir	-	0/0	0755	2025-09-24 06:15:36
syslog_client_util.sh	text/x-shellscript	7.78 KB	0/0	0755	2025-09-24 06:15:40
syslog_common.sh	text/x-shellscript	218 B	0/0	0755	2025-09-24 06:15:36
syslog_localarch_util.sh	text/x-shellscript	4.63 KB	0/0	0755	2025-09-24 06:15:40
syslog_main.sh	text/x-shellscript	6.65 KB	0/0	0755	2025-09-24 06:15:36
syslog_notification.sh	text/x-shellscript	10.87 KB	0/0	0755	2025-09-24 06:15:40
syslog_server_util.sh	text/x-shellscript	21.16 KB	0/0	0755	2025-09-24 06:15:40
syslog_test.sh	text/x-shellscript	3.86 KB	0/0	0755	2025-09-24 06:15:40
updater.sh	text/x-shellscript	2.64 KB	0/0	0755	2025-09-24 06:15:36

Team Anon Force

https://t.me/Professor6T9x