Centralized event log

[Jeeshan]

How can i centralize the event.log message?

I have lots of servers and i want to automate the event logs and if any error found i want to send mail or SMS.

NB- i need the definite answers.don't bother about points

[TTr]

> i need the definite answers
You need to ask a more definite question. Which "event.log message" are you talking about? syslog?, kernel messages(dmesg)?, EMS alerts? SIM alerts? There are so many monitoring services that generate event logs about hardware and software events.

[Jeeshan]

yeah, i asked a definite question. I guess you skipped it.

i'm talking about event.log. /var/opt/resmon/log/event.log

got that?

[James R. Ferguson]

Hi:

> yeah, i asked a definite question. I guess you skipped it.

NO, TTr's reply was spot-on. YOU may know what you are asking about, but the remainder of us didn't.

...JRF...

[Torsten. · Accepted solution]

All (classic) diagnostic related messages can also be sent via mail or snmp, see /etc/opt/resmon/lbin/monconfig and emscli.

You may also consider to install SFM (I don't know what hp-ux release you have) and integrate with System Insight Manager (SIM).

[TTr]

> i'm talking about event.log. /var/opt/resmon/log/event.log

"event.log" is a simple filename that can refer to any file. EMS does not own exclusive use of this particular filename. If you had added the absolute path to it I would have gotten it the first time.

[TTr]

> Jan 7, 2009 13:19:49 GMT 0 pts

Oh yeah! You showed me!

[Jeeshan]

hi Torsten, you got my point.

OS is 11iv1 and 11iv2.

[Fred K. Abell Jr._1]

Have you tried syslog-ng. The latest version is not ported for swinstall. Visit http://www.balabit.com/network-security/syslog-ng/

With this, you can centralize all your logging to one system.

Fred

[Mel Burslan]

Totally off-topic (hence no points necessary or expected) but I kinda dislike people who think, world owes them something and they are entitled to it, despite how rude they sound or they really are.

Nothing specific to this thread only. Multitudes of examples exist on ITRC forums. Just wanted to get this out of my chest. That's all...

[Fred K. Abell Jr._1]

Yikes, my bad. 'Grovel-Grovel'

Misread the question.

Never Mind!