Remote Syslog - Log Parsing

[MattJ123]

Is there a built-in way, within the syslogd(1) to put remote syslog output into specific files?

For example, on client a syslog.conf
*.emerg @xxx.xxx.xxx.xxx
on server b take that udp stream and put it into
hostname.messages

..rather than just having it go into the default /var/adm/syslog/syslog.log

[Marcel Boogert_1]

Hi there,

Where would your syslog messages go if your network is down?

Isn´t it an idea to rcp or ftp your clients syslog files to a central server on a daily base?

M

[MattJ123]

good question, that has been considered
the actual syslog.conf reads
*.emerg /var/adm/syslog/syslog.log
*.emerg @xxx.xxx.xxx.xxx

so its local & udp, this is more for administration at a glance really.. daily doesn't meet my needs as it would need to be realtime in most cases.

[Marcel Boogert_1]

Hi there,

I think it still isn´t possible yet.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=684937

Regards, M

[Marcel Boogert_1]

Matthew, it looks like you can...

I haven´t tested it yet...

Good luck, M