topic Re: remote syslog configuration in Operating System - HP-UX

remote syslog configuration

Robert C. Tseng — Tue, 19 Mar 2002 17:45:24 GMT

Hi,

I need to configure syslog for remote logging in the following way:

device1 --\ /-- collector1
\ /
+-- relay --+
/ device2 --/ \-- collector2

i.e.: all devices send syslog to relay; relay then send identical copies to both collectors

As this point, there is no problem configuring the flow. However, the problem is in the final form of the messages:

On device1 or device2:
"message"
On relay:
: "message"
On collectors:
: "message"

Question: how do I preserve the hostname/ip of the original device along the data flow?

Thanks in advance.

-Robert

Re: remote syslog configuration

Sandip Ghosh — Tue, 19 Mar 2002 17:59:16 GMT

You can do as follows

Redirect the syslog from device A and Device B to relay. The redirect the Relay syslog to CollectorA and CollectorB.

DeviceA \ /->CollectorA
\ /
/ Relay DeviceB / \->CollectorB

Sandip

Re: remote syslog configuration

Robert C. Tseng — Tue, 19 Mar 2002 18:13:16 GMT

Haven't master the ASCII art :-) Now let me try again, please disregard the dots:

.device1 --\.............. /-- collector1
............\............ /..............
.............+-- relay --+...............
............/.............\..............
.device2 --/...............\-- collector2

Please allow me to emphasize that the problem is not the data flow. The problem is that relay rewrites the part when relaying to collectors. I want to preserve the of the original device.

Thanks.

-Robert