System Administration
Showing results for 
Search instead for 
Do you mean 

Central syslog server.

SOLVED
Go to Solution
Regular Advisor [Founder]

Central syslog server.

Hello people,

We are having a central syslog server.

The central logging server is a linux server and they have put the folloing entires in the definition file.....

#Log all messages to the central syslog server alpha
*.warn;*.err @10.10.10.10
authpriv.*;auth.* @10.10.10.10

I have been given the oppertunity to do this from the my RP8400s.

I have added the following in one of hpux server.

# vi /etc/syslog.conf

*.warn;*.err @10.10.10.10
authpriv.*;auth.* @10.10.10.10

and saved the file and restarted the syslogd

It is taking *.warn;*.err @10.10.10.10.

But for authpriv.*;auth.* @10.10.10.10..

syslog.log gives this error..
unknown priority name "*": No such device or address
unknown priority name "authpriv": No such device or address

Anybody have any idea...

Thanks in advance ...

AM

If i am doing the same way you are doing to me then what is the difference between us.
5 REPLIES
Trusted Contributor [Founder]

Re: Central syslog server.

hi,
that's because on hpux the facility authpriv is not a known facility.

The known facilities are:
kern user mail daemon auth lpr local0 to local7

while the priorities are:
emerg alert crit err warning notice info debug

See man 3 syslog or go to the following link to have a better description

http://docs.hp.com/cgi-bin/onlinedocs.py?mpn=B2355-90695&service=hpux&path=00/01/196&title=HP-UX%20Reference%20%2811i%20v1%29%20-%203%20Library%20Functions%20n-z%20%28vol%207%29

hope it helps
Honored Contributor [Founder]

Re: Central syslog server.

On HP-UX you cannot use specification ".*" to select all priorities. To get the same effect you can use ".debug". That will log all messages for to the specified destination.

So change the second line to

auth.debug@10.10.10.10
Regular Advisor [Founder]

Re: Central syslog server.

Can i use the fully qualified domain name instead of 10.10.10.10...

Tx,

Am
If i am doing the same way you are doing to me then what is the difference between us.
Honored Contributor [Founder]

Re: Central syslog server.

Hi Amruth

Yes you can use hostname in place of IP address as long as your server can resolve the hostname.

Cheers
Con
Highlighted
Regular Advisor [Founder]

Re: Central syslog server.

I have a new request.

How can i get a a failed login as an email from the central logging server.

Any idea...or thoughts...

TX,
AM
If i am doing the same way you are doing to me then what is the difference between us.