topic Re: forwarding syslog in Operating System - HP-UX

forwarding syslog

Aaron Sheard — Fri, 10 May 2002 18:59:11 GMT

How do I forward all /var/adm/syslog/syslog.log messages to a remote syslogd server? I tried putting ip of syslog server with name loghost in the /etc/hosts file and did kill -HUP (syslog PID) but that didn't seem to do it.. Any one know? TIA!

Re: forwarding syslog

Sanjay_6 — Fri, 10 May 2002 19:04:14 GMT

Hi Aaron,

You should configure the /etc/syslog.conf file.

Do a "man syslogd" for more info on how to configure the syslog.conf file to send the syslog messages to another server.

Hope this helps.

Regds

Re: forwarding syslog

MANOJ SRIVASTAVA — Fri, 10 May 2002 19:08:23 GMT

Hi Aaron

/etc/syslog.conf

Manoj Srivastava

Re: forwarding syslog

Aaron Sheard — Fri, 10 May 2002 19:30:19 GMT

Forgive my ignorance but i checked the man pages and they dont show any example of forwarding events to a syslogd server.

I tried this in syslog.conf and sent kill -HUP to (syslogd pid)

but it still doesnt seem to work:

(where wslg000 is the syslog server)
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *

Re: forwarding syslog

Aaron Sheard — Fri, 10 May 2002 19:34:42 GMT

oops!

this is the file: mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.info;mail.none wslg000
*.alert /dev/console
*.alert root
*.emerg *

Re: forwarding syslog

Christopher Caldwell — Fri, 10 May 2002 19:34:43 GMT

From man syslogd [assume you're on host fred]
*.emerg @admin

send all of the messages of the *.emerg to the syslog host admin

If you use fully qualified domain names (FQDN), us @yourhost.yourdomain.com.

Re: forwarding syslog

Aaron Sheard — Fri, 10 May 2002 19:42:51 GMT

can i use:

* @wslg000.mydomain.net.

?

I tried that, using the fqdn (which is pingable) and sent kill -HUP - syslog on local server reflected the syslod restart but i'm not getting any messages at the server.

Re: forwarding syslog

Aaron Sheard — Fri, 10 May 2002 20:05:55 GMT

OK!! I finally have it working - this is what I added (Thanks guys!)

*.info;mail.none @wslg000.supernet.net.
*.alert @wslg000.mydomain.net.
*.emerg @wslg000.mydomain.net.