routing syslog to a single log server

[Donny Jekels]

anyone had to do something like this in the past?

[Cheryl Griffin · Accepted solution]

You would change the /etc/syslog.conf for any line that you want to log elsewhere.
For instance:
local0.* @hostname_here

Stop and restart syslogd when done:
# kill `cat /var/run/syslog.pid`
# /usr/sbin/syslogd -D
Cheryl

[Pete Randall]

This may help:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x1b285bd3782dd711abdc0090277a778c,00.html


Pete

[Cheryl Griffin]

# man syslogd
+ A host name preceded by an @ character. Selected messages are forwarded to the syslogd on the named host.

[Jeff Schussele]

Hi Donny,

Please note that the logger facility uses port 514/UDP.
If this data has to cross any firewall(s) en-route to the log server, you must insure the FW ruleset(s) will allow this traffic.

Rgds,
Jeff

[Donny Jekels]

thank you.
should be ok from here on. and thanks for the UDP port info, might need it later.