topic Re: configuring syslogd for external messages in Operating System - HP-UX

configuring syslogd for external messages

iamsam — Sat, 18 Feb 2006 17:12:17 GMT

Hi, I have a netgear router that I configured to fire log messages to an HP-UX system (C3700/HPUX 11i) and it works... all the warnings are in the var/adm/syslog/syslog.log file. here is a sample of 3 lines

Jan 31 15:17:43 192.168.0.1 FVS318 [111252]:TCP(18420) Dest IP : 70.48.45.32, Src IP :216.49.88.118
Jan 31 15:17:43 192.168.0.1 FVS318 [111253]:TCP(18165) Dest IP :
70.48.45.32, Src IP :216.49.88.118
Jan 31 15:17:43 192.168.0.1 FVS318 [111254]:TCP(18201) Dest IP :
70.48.45.32, Src IP :216.49.88.118
is there a way to have them redirected to a separate logfile (i.e. fvs318.log) ? I tried modifying the /etc/syslog.conf file but can't seem to figure out the proper selector for these messages...

any suggestions will be appreciated
thanks

Re: configuring syslogd for external messages

RAC_1 — Sat, 18 Feb 2006 21:31:22 GMT

Try putting @host /some_dir/some_file

Re: configuring syslogd for external messages

iamsam — Sat, 18 Feb 2006 23:00:34 GMT

i you mean on the router end... no luck, on, I can only specify an IP. I would think there is a way to tell syslogd to write messages coming from external hosts to a separate file ?

Re: configuring syslogd for external messages

PeterWolfe — Sun, 19 Feb 2006 17:50:47 GMT

>I would think there is a way to tell syslogd to write
>messages coming from external hosts to a separate file ?

Stock syslogd can filter on a message's facility and severity
(see syslogd(1M) for details).

Starting with 11i V2 December 05, syslog-ng (next
generation)is included with HP-UX. syslog-ng has
significantly more powerful filtering features
can be easily configured to filter on hostnames.

pete

Re: configuring syslogd for external messages

iamsam — Tue, 21 Feb 2006 22:06:04 GMT

thanks for the latest suggestions... unfortunately, 11iV2 isn't supported on my C3700 PA-RISC workstation... so back to script solution to extract those lines I am interested in analyzing

Re: configuring syslogd for external messages

Muthukumar_5 — Tue, 21 Feb 2006 22:52:15 GMT

what is the configuration you have done in /etc/syslog.conf. Try to use logger utility to check the error or warning redirection.

I feel it is also better to go with shell solution too. :)

--
Muthu