Central syslog server.

[Amruth]

Hello people,

We are having a central syslog server.

The central logging server is a linux server and they have put the folloing entires in the definition file.....

#Log all messages to the central syslog server alpha
*.warn;*.err @10.10.10.10
authpriv.*;auth.* @10.10.10.10

I have been given the oppertunity to do this from the my RP8400s.

I have added the following in one of hpux server.

# vi /etc/syslog.conf

*.warn;*.err @10.10.10.10
authpriv.*;auth.* @10.10.10.10

and saved the file and restarted the syslogd

It is taking *.warn;*.err @10.10.10.10.

But for authpriv.*;auth.* @10.10.10.10..

syslog.log gives this error..
unknown priority name "*": No such device or address
unknown priority name "authpriv": No such device or address

Anybody have any idea...

Thanks in advance ...

AM

[Cesare Salvioni · Accepted solution]

hi,
that's because on hpux the facility authpriv is not a known facility.

The known facilities are:
kern user mail daemon auth lpr local0 to local7

while the priorities are:
emerg alert crit err warning notice info debug

See man 3 syslog or go to the following link to have a better description

http://docs.hp.com/cgi-bin/onlinedocs.py?mpn=B2355-90695&service=hpux&path=00/01/196&title=HP-UX%20Reference%20%2811i%20v1%29%20-%203%20Library%20Functions%20n-z%20%28vol%207%29

hope it helps

[Ermin Borovac]

On HP-UX you cannot use specification ".*" to select all priorities. To get the same effect you can use ".debug". That will log all messages for to the specified destination.

So change the second line to

auth.debug@10.10.10.10

[Amruth]

Can i use the fully qualified domain name instead of 10.10.10.10...

Tx,

Am

[Con O'Kelly]

Hi Amruth

Yes you can use hostname in place of IP address as long as your server can resolve the hostname.

Cheers
Con

[Amruth]

I have a new request.

How can i get a a failed login as an email from the central logging server.

Any idea...or thoughts...

TX,
AM