forwarding syslog

[Aaron Sheard]

How do I forward all /var/adm/syslog/syslog.log messages to a remote syslogd server? I tried putting ip of syslog server with name loghost in the /etc/hosts file and did kill -HUP (syslog PID) but that didn't seem to do it.. Any one know? TIA!

[Sanjay_6 · Accepted solution]

Hi Aaron,


You should configure the /etc/syslog.conf file.

Do a "man syslogd" for more info on how to configure the syslog.conf file to send the syslog messages to another server.

Hope this helps.

Regds

[MANOJ SRIVASTAVA]

Hi Aaron


/etc/syslog.conf


Manoj Srivastava

[Aaron Sheard]

Forgive my ignorance but i checked the man pages and they dont show any example of forwarding events to a syslogd server.

I tried this in syslog.conf and sent kill -HUP to (syslogd pid)

but it still doesnt seem to work:

(where wslg000 is the syslog server)
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *

[Aaron Sheard]

oops!

this is the file: mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.info;mail.none wslg000
*.alert /dev/console
*.alert root
*.emerg *

[Christopher Caldwell]

From man syslogd [assume you're on host fred]
*.emerg @admin

send all of the messages of the *.emerg to the syslog host admin

If you use fully qualified domain names (FQDN), us @yourhost.yourdomain.com.

[Aaron Sheard]

can i use:

* @wslg000.mydomain.net.

?

I tried that, using the fqdn (which is pingable) and sent kill -HUP - syslog on local server reflected the syslod restart but i'm not getting any messages at the server.

[Aaron Sheard]

OK!! I finally have it working - this is what I added (Thanks guys!)

*.info;mail.none @wslg000.supernet.net.
*.alert @wslg000.mydomain.net.
*.emerg @wslg000.mydomain.net.