syslog-ng

[Shibu_2]

Hi Masters

I need to consolidate the syslogs from different servers into a standalone server.The configuration is working with syslog when I use the /etc/syslog.conf and put entry
*.info;mail.none @
With the above entry in the client machine I am able to view the logs on a specified file in the consolidated server together with the logs of the server.

The need is to have different files per server and as per my understanding DSAU which have the syslog-ng will be most suitable.

Once the configuration is done with syslog-ng according to the whitepaper from Doc site, the service is starting I am able to see the tcp service port listening on the server and from the client the connection is established to the server port.

I am trying to view the syslog on the specified directory " /etc/rc.config.d/syslogng " in the server only the logs specified to syslog-ng is visible even the syslog on the same server is not there. On the client the syslog messages are not visible at all at the same time not on the server also

Have some one gone through such a configuration and if wher to find the logs?

Thanks
Sgk

[whiteknight]

Hi Shibu,

Take a look at this doc, hope this may give you clue.

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01005939-1


WK

[Shibu_2]

Hi WK

Thanks for a quick reply I am not able to access the file. There is a restriction to login from my account it seems.

Sgk

[Shibu_2]

Hi WK

I got the document which helps to consolidate the logs with syslog.conf,but the requirement is to have different logs like package and application logs for consolidation. This case my option is only to use the syslog-ng.
The configuration is already working with syslogd configuration but not with syslog-ng

Thanks Shibu