Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
Send UDP remote syslog message from PHP (RFC 3164)
# replace PAPERTRAIL_HOSTNAME and PAPERTRAIL_PORT
# see http://help.papertrailapp.com/ for additional PHP syslog options
function send_remote_syslog($message, $component = "web", $program = "next_big_thing") {
$sock = socket_create(AF_INET, SOCK_DGRAM, SOL_UDP);
foreach(explode("\n", $message) as $line) {
$syslog_message = "<22>" . date('M d H:i:s ') . $program . ' ' . $component . ': ' . $line;
socket_sendto($sock, $syslog_message, strlen($syslog_message), 0, PAPERTRAIL_HOSTNAME, PAPERTRAIL_PORT);
}
socket_close($sock);
}
send_remote_syslog("Test");
# send_remote_syslog("Any log message");
# send_remote_syslog("Something just happened", "other-component");
# send_remote_syslog("Something just happened", "a-background-job-name", "whatever-app-name");
?>
@kbond
Copy link

kbond commented Feb 1, 2013

change date('M j H:i:s ') with date('M d H:i:s ') to ensure works correctly on days 01-09

@troy
Copy link
Author

troy commented Feb 1, 2013

@kbond: Changed. Thanks!

@troy
Copy link
Author

troy commented Feb 25, 2013

Updated to handle newlines by transmitting them as multiple messages.

@coderofsalvation
Copy link

coderofsalvation commented Apr 26, 2014

thnx, turned into a static class + support for local php syslog() function: https://gist.github.com/coderofsalvation/11325307

@jmcbee
Copy link

jmcbee commented Dec 9, 2014

what the meaning of <22>? Is that the facility level?

@tenaciousRas
Copy link

tenaciousRas commented Sep 1, 2015

Is it possible to max the number of socket connections? Any PHP config to lookout for?

@troy
Copy link
Author

troy commented Sep 5, 2015

@fbm-static: Yes, that's a numeric code for the facility and severity. This example uses a single static value for both, and thus a static number, but it could also be calculated according to https://tools.ietf.org/html/rfc3164#section-4.1.1.

@tenaciousRas: Not that I've heard of from users. This is emitting a UDP packet, which is typically 1ms or less, so you'd need tens of thousands of concurrent requests happening at exactly the same time (and thus probably hundreds of thousands or millions of typical concurrent sessions) in order to consume the ~60k ephemeral ports. Nothing special required that I know of.

@zajca
Copy link

zajca commented Aug 25, 2020

Hi is there way how to use this behind application proxy, I can't access internet from app different way than use proxy.

@troy
Copy link
Author

troy commented Aug 25, 2020

Hi is there way how to use this behind application proxy, I can't access internet from app different way than use proxy.

Not as-is. You might be able to make it work with a UDP-friendly SOCKS server like https://github.com/clue/php-socks, but it's way beyond the scope of anything that's in the code now or practical to discuss here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment