topic Re: Remote logging to different server in Operating System - HP-UX

Remote logging to different server

tom quach_1 — Wed, 25 Nov 2009 19:04:16 GMT

Dear,

HP-UX 11.31
i've configured remote logging from HP-UX to HP-UX, it's working fine i can see the log write to local and remote HPUX server.
we just purchase a Cisco MARS, it is a logserver. but i can only make linux send logfile to this MARS but not HPUX.
Please help it anyone uses MARS as logserver on HPUX env.
Thanks in advance.
Tom

Re: Remote logging to different server

Tim Nelson — Wed, 25 Nov 2009 19:08:59 GMT

could you post your /etc/syslogd.conf please.

Re: Remote logging to different server

Tim Nelson — Wed, 25 Nov 2009 19:10:37 GMT

I think I read this backwards.

You want your linux box to send syslog messages to the HPUX server ?

Re: Remote logging to different server

tom quach_1 — Wed, 25 Nov 2009 19:19:25 GMT

Thanks for your reply.
i would like to send syslog from HPUX to MARS
(reading to MARS's doc it supports Generic,Solaris,Linux)
The Linus is working now, only HP-UX could not send syslog to the MARS.

Thanks,

# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
syslog_enable=yes
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.info;mail.none @sunuxdev
*.alert /dev/console
*.alert root
*.emerg *
*.info;mail.none @10.10.0.8 (MARS )
*.info;mail.none @10.10.2.15 (HPUX 11.31)
*.info;mail.none @10.10.4.87 (Linux Redhat)

in this syslog.conf the syslog server 10.10.2.15 is working fine but it could not send log to 10.10.0.8 and 10.10.4.87

Re: Remote logging to different server

Bill Hassell — Thu, 26 Nov 2009 00:31:41 GMT

> *.info;mail.none @10.10.0.8 (MARS )
> *.info;mail.none @10.10.2.15 (HPUX 11.31)
> *.info;mail.none @10.10.4.87 (Linux Redhat)

Check syslog.conf using this command:

cat -tv /etc/syslog.conf

You should see *NO* spaces between items in the list. Only tabs (shown as ^I) are allowed and any line that has a space is ignored (without any error message).