- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Question regarding syslog.conf
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-30-2010 09:09 AM
тАО07-30-2010 09:09 AM
A quick question, would like to know if it is possible to configure syslog in such a way the following entries get written into a separate file. Here is the entry:
romans02 inetd[8563]: registrar/tcp: Connection from romans02 (172.17.4.10) at Fri Jul 30 10:03:19 2010
Here is a copy of our syslog.conf file
# cat syslog.conf
# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none;auth.none /var/adm/syslog/syslog.log
auth.info /var/adm/syslog/auth.log
*.alert /dev/console
*.alert root
*.emerg *
Thank you for your comments
Norm
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-30-2010 09:46 AM
тАО07-30-2010 09:46 AM
Re: Question regarding syslog.conf
Your question is confusing me?
Could you focus on your query in details?
here, I have put entries of /etc/syslog.conf file!
# @(#)B11.23_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *
Regards
Deeos
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-30-2010 09:54 AM
тАО07-30-2010 09:54 AM
Re: Question regarding syslog.conf
This will log all new entries to the change path
Thanks
Ishwar VenuGopal
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-30-2010 10:38 AM
тАО07-30-2010 10:38 AM
Re: Question regarding syslog.conf
Let me attempt to re-phrase my question:
Currently we have in our syslog file the following entry occuring over and over and over again:
romans02 inetd[8563]: registrar/tcp: Connection from romans02 (172.17.4.10) at Fri Jul 30 10:03:19 2010
Would like to have this entry not go into our syslog file instead would like to have this entry and all other inetd loggin entries be written to a separate file. With the help of Bill Hassell we are writing auth info to auth.log in syslog directory. WOuld like to do the same thing for the inetd entry. Does this help?
Thank you
Norm
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-31-2010 06:22 PM
тАО07-31-2010 06:22 PM
Re: Question regarding syslog.conf
inetd? What log entries do you have for inetd? By default, inetd does not log connections. Did you modify netdaemons to add INETD_ARGS?
Bill Hassell, sysadmin
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-31-2010 06:33 PM
тАО07-31-2010 06:33 PM
Solution*.info;mail.none;local0.none;local1.none;local2.none;local3.none;local4.none;local5.none;auth.none;user.none;lpr.none;daemon.none;kern.notice; /var/adm/syslog/syslog.log
mail.debug /var/adm/syslog/mail.log
local0.info;local1.info;local2.info;local3.info;local4.info /var/adm/syslog/local01234.log
local5.info /var/adm/syslog/ftpd.log
auth.info /var/adm/syslog/auth.log
daemon.info /var/adm/syslog/daemon.log
kern.info /var/adm/syslog/kern.log
lpr.info /var/adm/syslog/lpr.log
In the above example, inetd will log to daemon.log.
Bill Hassell, sysadmin
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-02-2010 02:55 PM
тАО08-02-2010 02:55 PM
Re: Question regarding syslog.conf
Thanks again for your input, very helpful. Yes indeed did modify netdaemons file and turned on logging - audit requirements
Norm