syslogd not sending hostname to remote syslog server? syslog-ng DSAU wizard ends with error

[NicolaB]

Hi all,

i have several HP-UX machines (HP Release B.11.31) that need to be configured for sending auth.info logs to external syslog machine (Juniper STRM) for log retain purpose.

I've found some problems in this process, it seems that forwarded logs by HP-UX syslogd daemon do not contains "hostname" of the server, which is indeed registered in syslog.log local file and needed by remote syslog appliance to do Log Source association and parsing.

From what I've read around it seems to be a syslogd problem, am I correct?

I thoght then that switching to syslog-ng could save me from this issue.

I've read that I can configure syslog-ng in HP-UX using the DSAU wizard invoking "/opt/dsau/sbin/clog_wizard" and configuring the host as a standalone Log-forwarding client.

I tried the wizard but it ends with these errors:

[...]

Starting syslogd for the configuration changes to take effect.

ERROR: Unable to determine the DNS domain for host:
dbdr1

ERROR: Unable to update syslog files for local loopback
on node dbdr1.

ERROR: Unable to determine the DNS domain for host:
dbdr2

ERROR: Unable to update syslog files for local loopback
on node dbdr2.

ERROR: Errors encountered when configuring dbdr_cluster
as a log consolidation client.

[...]

any clue on what could be the problem?

Thanks

[P Arumugavel]

Try to add client IP and name in hosts file on syslog server.

Rgds...

Vel

[NicolaB]

they are already in it...