remote syslog

[Richard Mertz]

We are setting up a server to receive system logs from both our NT machines and HP-UX boxes. I have hunted around and can't find how to configure HP-UX (10.20 and 11.0) to send log entries to another box. Can anyone point me in the right direction?

Richard

[James R. Ferguson · Accepted solution]

Richard:

See the man pages for syslogd (1M). An "@" sign signifies a hostname. For example:

*.emerg @admin

means emerg messages are written to all logged-in users' terminals, and forwarded to the host "admin".

...JRF...

[Kofi ARTHIABAH]

If you do a man on syslogd you will find the information you want - essentially, all you have to do is to modify /etc/syslog.conf and put an entry with @admin as the destination eg.

*.info;mail.none @admin

will send all your syslog info level to a host named admin.

you would have to restart syslogd (/sbin/init.d/syslogd stop ; /sbin/init.d/syslogd start) after making the changes.

[John Palmer]

You can also get syslogd to reread /etc/syslog.conf by sending it a HUP signal... kill -1

[Richard Mertz]

Thanks guys. I had read the man page but didn't understand the @hostname and how it worked.

Richard