topic Re: Centralized event log in Operating System - HP-UX

Centralized event log

Jeeshan — Wed, 07 Jan 2009 13:00:08 GMT

How can i centralize the event.log message?

I have lots of servers and i want to automate the event logs and if any error found i want to send mail or SMS.

NB- i need the definite answers.don't bother about points

Re: Centralized event log

TTr — Wed, 07 Jan 2009 13:19:49 GMT

> i need the definite answers
You need to ask a more definite question. Which "event.log message" are you talking about? syslog?, kernel messages(dmesg)?, EMS alerts? SIM alerts? There are so many monitoring services that generate event logs about hardware and software events.

Re: Centralized event log

Jeeshan — Wed, 07 Jan 2009 13:56:27 GMT

yeah, i asked a definite question. I guess you skipped it.

i'm talking about event.log. /var/opt/resmon/log/event.log

got that?

Re: Centralized event log

James R. Ferguson — Wed, 07 Jan 2009 14:01:08 GMT

Hi:

> yeah, i asked a definite question. I guess you skipped it.

NO, TTr's reply was spot-on. YOU may know what you are asking about, but the remainder of us didn't.

...JRF...

Re: Centralized event log

Torsten. — Wed, 07 Jan 2009 14:09:51 GMT

All (classic) diagnostic related messages can also be sent via mail or snmp, see /etc/opt/resmon/lbin/monconfig and emscli.

You may also consider to install SFM (I don't know what hp-ux release you have) and integrate with System Insight Manager (SIM).

Re: Centralized event log

TTr — Wed, 07 Jan 2009 14:38:58 GMT

> i'm talking about event.log. /var/opt/resmon/log/event.log

"event.log" is a simple filename that can refer to any file. EMS does not own exclusive use of this particular filename. If you had added the absolute path to it I would have gotten it the first time.

Re: Centralized event log

TTr — Wed, 07 Jan 2009 14:41:15 GMT

> Jan 7, 2009 13:19:49 GMT 0 pts

Oh yeah! You showed me!

Re: Centralized event log

Jeeshan — Wed, 07 Jan 2009 16:41:07 GMT

hi Torsten, you got my point.

OS is 11iv1 and 11iv2.

Re: Centralized event log

Fred K. Abell Jr._1 — Wed, 20 May 2009 19:55:26 GMT

Have you tried syslog-ng. The latest version is not ported for swinstall. Visit http://www.balabit.com/network-security/syslog-ng/

With this, you can centralize all your logging to one system.

Fred

Re: Centralized event log

Mel Burslan — Wed, 20 May 2009 20:00:34 GMT

Totally off-topic (hence no points necessary or expected) but I kinda dislike people who think, world owes them something and they are entitled to it, despite how rude they sound or they really are.

Nothing specific to this thread only. Multitudes of examples exist on ITRC forums. Just wanted to get this out of my chest. That's all...

Re: Centralized event log

Fred K. Abell Jr._1 — Wed, 20 May 2009 20:07:59 GMT

Yikes, my bad. 'Grovel-Grovel'

Misread the question.

Never Mind!