Security

Remote log forwarding does not work

 
SOLVED
Go to solution
Kauser
Advisor

Remote log forwarding does not work

Dear Concern,

We've enabled log forwarding to remote server from syslog.conf and restart syslogd service but remote host doesn't receieve the log. Please assist us to check if there is any issue from host side. Configuration file is as below.

bash-4.3# cat /etc/syslog.conf|grep -v "#"
mail.debug              /var/adm/syslog/mail.log
*.info;mail.none        /var/adm/syslog/syslog.log
*.alert                 /dev/console
*.alert                 root
*.emerg                 *
*.debug         @10.75.10.165

*.info;mail.err;mark.none       /var/log/ids_syslog.pipe
bash-4.3#

 With Best Regards,

Kauser

1 REPLY 1
Solution

Re: Remote log forwarding does not work

Common problem with syslog.conf is having spaces in the file instead of tabs - run:

 

cat -t /etc/syslog.conf

 

Ignoring the comment lines, the only thing between the selectors and actions in the file should be tabs. Here's my file:

 

# cat -t /etc/syslog.conf
# @(#)B.11.11_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug^I^I/var/adm/syslog/mail.log
*.info;mail.none^I/var/adm/syslog/syslog.log
*.alert^I^I^I/dev/console
*.alert^I^I^Iroot
*.emerg^I^I^I*

 

 


I am an HPE Employee
Accept or Kudo