topic monitoring syslog in Operating System - HP-UX

monitoring syslog

Animesh Chakraborty — Fri, 25 Aug 2000 00:35:46 GMT

Hi,
can any one suggest what is the best way to monitor syslog everyday for several server.
I am not using ITO.
Thanx
animesh

Re: monitoring syslog

Jeremiah Campbell — Fri, 25 Aug 2000 00:56:18 GMT

I run a script that remsh's to each server and grep's for keywords such as "error fail full unable terminat restart" etc... The context is fairly easy;
#############################
#!/usr/bin/sh
for server in `cat server.list`
do
for error in `cat error.list`
do
remsh $server "grep $error /var/adm/syslog/syslog.log" >> a.out
done
done
#######################
Don't forget to put a entry in each .rhosts file on each server including the one the script runs from for the machine and the uid that will run it. example:
myhp myuid

Do not use any plus + signs in the .rhosts file unless you don't care about security.

Re: monitoring syslog

Jeremiah Campbell — Fri, 25 Aug 2000 00:58:39 GMT

Re: monitoring syslog

Denver Osborn — Fri, 25 Aug 2000 00:58:57 GMT

you could set it up so that the syslogd on one system will send the messages to another system. Then you could monitor one system's syslog for multiple systems.

Use the @host option in the /etc/syslog.conf file then execute: kill -HUP `cat /etc/syslog.pid` to reread the changes made to syslog.conf

# man 1M syslogd

Re: monitoring syslog

Kofi ARTHIABAH — Fri, 25 Aug 2000 01:35:58 GMT

Re: monitoring syslog

Kofi ARTHIABAH — Fri, 25 Aug 2000 01:44:55 GMT

Re: monitoring syslog

Kofi ARTHIABAH — Fri, 25 Aug 2000 02:52:53 GMT