topic Re: routing syslog to a single log server in Operating System - HP-UX

routing syslog to a single log server

Donny Jekels — Mon, 24 Mar 2003 13:53:18 GMT

anyone had to do something like this in the past?

Re: routing syslog to a single log server

Cheryl Griffin — Mon, 24 Mar 2003 14:00:10 GMT

You would change the /etc/syslog.conf for any line that you want to log elsewhere.
For instance:
local0.* @hostname_here

Stop and restart syslogd when done:
# kill `cat /var/run/syslog.pid`
# /usr/sbin/syslogd -D
Cheryl

Re: routing syslog to a single log server

Pete Randall — Mon, 24 Mar 2003 14:01:13 GMT

This may help:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x1b285bd3782dd711abdc0090277a778c,00.html

Pete

Re: routing syslog to a single log server

Cheryl Griffin — Mon, 24 Mar 2003 14:01:55 GMT

# man syslogd
+ A host name preceded by an @ character. Selected messages are forwarded to the syslogd on the named host.

Re: routing syslog to a single log server

Jeff Schussele — Mon, 24 Mar 2003 14:07:42 GMT

Hi Donny,

Please note that the logger facility uses port 514/UDP.
If this data has to cross any firewall(s) en-route to the log server, you must insure the FW ruleset(s) will allow this traffic.

Rgds,
Jeff

Re: routing syslog to a single log server

Donny Jekels — Mon, 24 Mar 2003 14:12:21 GMT

thank you.
should be ok from here on. and thanks for the UDP port info, might need it later.