System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Question on syslog-ng and syslog

Becke
Super Advisor

Question on syslog-ng and syslog


Dear All

I have configured syslog-ng in my unix box, this has overriden syslog daemon, but now I have started it up manually and both daemons are running fine.

I have a problem when syslog-ng daemon is also running then my client cannot get logs coming from syslog.conf file,

is this because both syslog and syslogng are using same socket ie /dev/log, do i need to create a new socket for syslogng or if you could tell me please on how to get syslog working while syslog-ng is also running ?

3 REPLIES
Johnson Punniyalingam
Honored Contributor

Re: Question on syslog-ng and syslog

common problems , could be using "Space" in stud of [TAB] key

please try as below # vi /etc/syslog.conf

*.debug [TAB]@logserver on the syslog.conf


restart "syslog" as below

/sbin/init.d/syslogd stop
/sbin/init.d/syslogd start


Problems are common to all, but attitude makes the difference
Taifur
Respected Contributor

Re: Question on syslog-ng and syslog

Hi,

Check this issue by,

/sbin/init.d/syslogd stop
/sbin/init.d/syslogd start

check below link,
http://docs.hp.com/en/5991-7402/ch07s06.html

http://docs.hp.com/en/B9106-90010/syslog.3C.html

Cheers,
Taifur
Horia Chirculescu
Honored Contributor

Re: Question on syslog-ng and syslog

Hello,

You can not use both syslog and syslogd on the same machine as long as they both are using the same source: /dev/log.

The first daemon running would open a pipe to that source and will get the data from it. The second daemon would fail.

You can do something like this:

Use syslogd to collect data as "usual" (meaning standard install, would read from /dev/log).

Set syslogd-ng with no source for data (do not read /dev/log).

Set syslogd-ng to bind on another IP address from your local server (IP_Address)

Set syslogd to forward the messages to @IP_Address

Best regards,
Horia.
Best regards from Romania,
Horia.