topic Loghost server in Operating System - HP-UX

Loghost server

Robert True — Thu, 01 Jul 2004 08:11:47 GMT

I would like to configure a syslog loghost server that would store received messages by hostname rather than class and severity, IE:

mesgs from host1 are stored in
loghost_server:/var/log/host1

msgs from host2
loghost_server:/var/log/host2

etc...

Any thoughts as to how it might be done, if possible? I know it can be done by class and severity. If not, is there any freeware prog to split the messages post logging, other than roll my own.

Re: Loghost server

MarkSyder — Thu, 01 Jul 2004 08:16:03 GMT

Just off the top of my head (I've never tried this) you could make /var/adm/syslog/syslog.log a symbolic link to loghost_server:/var/log/host1 etc.

Mark Syder (like the drink but spelt different)

Re: Loghost server

Robert True — Thu, 01 Jul 2004 09:00:02 GMT

No, linking to a new log name is not what I am after. All messages from all remote hosts are currently going to the syslog.log on the loghost server. I want to send all of each remote hosts messages to a different log on the loghost server.

Rt.

Re: Loghost server

Tom Maloy — Thu, 01 Jul 2004 10:13:55 GMT

You can only choose based on the options in syslog.conf, so you will have to roll, roll, roll your own, gently down the...