ftp logs are save in some other path not in syslog.lo

[rajesh73]

Hi all
i have hp-ux 11.23 os
normally what are ftp login details are sved in /var/adm/syslo/syslog.log
but i need to save the what are the ftp logins are saved to some other place don't want save in syslog.log file.

pls any one help me very urgent

[Horia Chirculescu · Accepted solution]

Hello,

The current HP-UX ftpd implementation does not offer this possibility. You only are able to save the logs from all the daemons (including ftpd) running on your server to another log file like this (edit /etc/syslogd.conf and restart syslogd):

*.info;mail.none;daemon.none /var/adm/syslog/syslog.log
daemon.* /var/adm/syslog/daemon.log


Also, you can use another ftp daemon like proftpd:

http://www.proftpd.org/

That will provide you the facility to redirects all logging output to the specified file. (see SystemLog directive - read the docs)

You have to compile it on your server or you can use an older version already compiled for HP-UX from porting archive:

http://hpux.connect.org.uk/hppd/hpux/Networking/FTP/proftpd-1.3.2b/

But it is an old version.

Horia.

[rajesh73]

Hi Horia

thank you for reply. I tried but it is not working. it will work in 11.23?

psl reply urgent if u dont mind

Rajesh

[rajesh73]

Hi
i enterd same entry in syslog.conf

*.info;mail.none;daemon.none /var/adm/syslog/syslog.log
daemon.* /var/adm/syslog/daemon.log

Regds
Rajesh

[Johnson Punniyalingam]

Hi Rajesh,

(edit /etc/syslogd.conf and restart syslogd):

after that did you restart the "syslodg" ?

/sbin/init.d/syslogd stop
/sbin/init.d/syslogd start

rgds,

[Horia Chirculescu]

>i enterd same entry in syslog.conf

Did you restarted syslogd afther you edited /etc/syslogd.conf?

/sbin/init.d/syslogd stop

/sbin/init.d/syslogd start

Horia.

[rajesh73]

hi

once i enterd i restarted the syslog daemon

still i facing same problem

here with i attached the syslog file

Regds
Rajesh

[Horia Chirculescu]

You have a problem...

>daemon.*/var/adm/syslog/daemon.log

The file /etc/syslog.conf must respect a pattern. There must be TABs between the fields

Between daemon.* and /var you must insert TABs.

Horia.

[Horia Chirculescu]

As usual, read man pages:

man syslogd

Horia.

[rajesh73]

i was entered the TAB between two fields but still same problem

[rajesh73]

i was entered the TAB between two fields but still same problem

[rajesh73]

i was entered the TAB between two fields but still same problem

daemon.* /var/adm/syslog/daemon.log

kindly find the attachement

[rajesh73]

pls any one help me very urgent

[Horia Chirculescu]

>but still same problem

What exactly is your "same problem"? Do you get the file: /var/adm/syslog/daemon.log ?

Did you restarted the syslogd daemon afther you have re-configured it?

Horia.

[rajesh73]

Hi Horia

sorry i am distrbuing you

i dont know where iam doing mistake
i create file /var/adm/syslog/daemon.log
once in entered syslog.conf i restarted the syslogd service
still i can,t

here with i have attached the what iam done exactly

[Horia Chirculescu]

This is informational.

>Mar 11 13:35:22 server1 ftpd[9334]: FTP >session closed
>Mar 11 13:35:34 server1 ftpd[9507]: User >rajesh: Login incorrect


Try with local5 facility.

*.info;mail.none;daemon.none;local5.none /var/adm/syslog/syslog.log

local5.info /var/adm/syslog/ftp.log

or even

local5.* /var/adm/syslog/local5.log

Horia.

[Horia Chirculescu]

Hello Rajesh,

Did you succeeded into this?

Horia.