Logs not getting shipped to syslog server

[boomerang]

Hi Admins,

Logs not getting shipped to syslog server.

The below is entry has been made in /etc/syslog.conf (where syslog server ip is 10.10.12.16),debug and @ is separated with tab.

*.debug @10.10.12.16

syslogd is running and 10.10.12.16 is reachable from hostmachine.

My need to point the logging into the syslog server.the configuration is working fine in other servers.

Please suggest.

[R.O.]

Did you restart the syslogd daemon?

Regards,

[boomerang]

yes, I had restarted

[stephen peng]

try not to send this message to syslog server but to local syslog.log, see what would happen.

[boomerang]

Logs are getting logged in syslog.log

[R.O.]

Is the port 514 for remote system logging reachable in the syslog server from your system?
Try "telnet 10.10.12.16 514"

Regards,

[boomerang]

syslog server (10.10.12.16) is windows machine

[S. Ney]

Maybe try sending one element to your remote log server?

For example
mail.debug @10.10.12.16
*.alert;mail.none;local5.none;auth.none;daemon.none /var/adm/syslog/syslog.log

That would send all mail to your log server, no mail, ftp,auth or daemons to your syslog and only alert level or higher to syslog.

I've also attached an old document by Bill Hassell dated from 2004 that I download from the web. It has a how to redirect telnet and a script for syslog.