Cannot send syslog to another server

[ikbea]

Hi all,

I used HPUX 10.20. The configuration of /etc/syslog.conf:

mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.crit /var/adm/syslog/syslog.log.ito
*.alert /dev/console
*.alert root
*.emerg *

The above setting worked for a long time.

I want to send a copy of log to another server(serverA).Then, in syslog.conf, I added a new entry:

*.debug @serverA

I restarted syslogd:
/sbin/rc1.d/K780syslogd stop
/sbin/rc2.d/S220syslogd start

No log send to serverA.

For testing syslogd, I send log to another file /tmp/tmp.log in local server

*.debug /tmp/tmp.log

Restart syslogd again. No log send to /tmp/tmp.log

For another testing, I add a new entry to send another copy of syslog.log to /tmp/tmp.log

*.info /tmp/tmp.log

Restart syslogd again. No log send to /tmp/tmp.log

Thanks !

[Matti_Kurkela · Accepted solution]

In the syslog.conf file, there must be one or more TAB character between the selector and the destination fields. The SPACE character is wrong here.

So, you'll want
*.debug@serverA
not
*.debug@serverA

I think this has surprised quite a lot of sysadmins on all unix-like operating systems since the early days of syslogd. So if you made this mistake, you certainly are not alone :-)