Archiving log messages

[ROSS HANSON]

I have several HPUX systems that I wish to "collect up"
the various log messages that are put out and then I want to send them to a Linux machine for storage.
What is the way for me to send these log files to the Linux machine automatically. I can write a script later
to organize them later I just am looking for the way to get them from one machine to another.

Thank you

[James R. Ferguson]

Hi:

Use 'ftp' or 'rcp'. There are lots of threads on both with lots of suggested scripts posted in the forum, here. Do a search on "ftp and script" and/or "rcp".

...JRF...

[Bruce Regittko_1]

Hi,

You may also want to use tar to create a single archive file prior to using ftp or rcp. This may be easier to store, as well, especially if the archive name is descriptive.

--Bruce

[Steven Sim Kok Leong]

Hi,

In my environment, I run scripts on the various servers where the logs reside to check through the logs and trigger alerts using the logger command to a central logging and paging station to either email or page me any status alerts.

Syslogging is using UDP traffic as opposed to connection-oriented transfers like rcp, ftp, scp or sftp for that matter. Connectionless UDP transfers ensures that the periodic cron transfers that my servers send to the central station do not get hung due to heavy traffic conditions or central station unstabilities.

If your central logging station was facing a performance bottleneck and is slow in processing the transferred data, processes (ie. cron transfer scripts, scp sessions etc) may accumulate on your servers (source of transfer), causing your servers to run out of resources. This is especially so if your servers are sending the logs very frequently.

A long time ago, I used to be using scp for my transfers but subsequently I converted to using logger instead to ensure minimal performance overheads.

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com