Logging to Syslog daemon from OpenVMS

[geir_2]

Hi,

Could someone help me to configure logging from VMS to Syslog.
I assume it's possible to tell VMS what type of message I want to log.
Thanks!

Geir

[harry d brown jr]

From a quick google, you can start here: http://www.loganalysis.org/sections/syslog/syslog-nonunix/

you can get http://vms.process.com/scripts/fileserv/fileserv.com?SYSLOGD

live free or die
harry d brown jr

[geir_2]

Hi,
Thanks for the answer. In Unix and Cisco it's enough with the logging and trap command for logging to Syslog.

Does VMS have simular command?

regards geir


PS:
I have allready a syslog deamon running on Windows 2000.

[Uwe Zessin]

I've never heard that any VMS component can send messages to a syslog daemon.

[Antoniov.]

Hi Geir,
the 2nd link of Harry points to Process Software that's a vms company!
I believe you can find there what you search. We are ready to help you to installation.

Antonio Vigliotti

[Uwe Zessin]

Somehow I don't think (s)he is looking for a syslog daemon running _on_ VMS...

[Robert Atkinson]

Geir, I think you mean logging of system messages?

'$ SHOW AUDIT' will tell you what messages are being written to the console port (ALARMs) and which are being written to the log file (AUDITs), which is SYS$MANAGER:OPERATOR.LOG.

You can enable messages to come to your own terminal by typing '$ REPLY /ENABLE'.

Is this what you are looking for?

Robert.

[Jan van den Ende]

Geir,

what kind of messages and/or events do you want to register?

Between OPLOG, ACCOUNTNG and AUDIT, (nearly) everything you might want to audit CAN be auditted, in various grades of detail. There is A LOT of freedom in configuering those, up to the extent where the sheer tracefile sizes can become the bottleneck.

Tell us WHAT you want, on a permanent basis, or temporarily (maybe as a debug), and we will tell you how to configure that.

Proost.

Have one on me.

Jan

[geir_2]

Hi,

Thanks for the answer. I want to log following messages.

- system down
- link down
- wrong password
- disk error
- information about backup utility


I know that Solaris have no problem to handle it.

regards geir

[Martin Vorlaender · Accepted solution]

Geir,

I'm afraid VMS system services and utilities are not set up to post their messages to a syslog daemon.

Writing a program one could, of course, scan the system for all kinds of messages and forward them to a syslogd.

cu,
Martin

[Ian Miller.]

the logger program in the syslogd.zip would be a place to start

[geir_2]

Hi,

Summary:

Thanks for the answers.As I understand, VMS does not have a solution on the problem.

The only way the solve the problem, is to write a program.

Thanks again.

[Jan van den Ende]

Geir,

what exactly do you mean by "Syslog" ?

If you mean, a trace-file with messages sent to a system-wide certral messages file, then I _DO_ think SYS$MANAGER:OPERATOR.LOG can serve you very well!
(if the location in SYS$MANAGER does not suit you for some reason, then $ DEFINE/SYSTEM/EXECUTIVE OPC$LOGFILE_NAME to whatever you like)

It _DOES_ record system Startup.
It _DOES_ record requested system shutdown
(at unvoluntairy system halts there usually is no time to write a message)
It _DOES_ record device errors.
By default, TCPIP does signal disconnected links to OPCOM. This _CAN_ be switched off.
It _DOES_ record all messages by utilities that send messages to OPCOM. Your question about BACKUP eg. is one.
It _DOES_ record any "request" sent by any user / any process.
It _DOES_ record any event that is specified by SET AUDIT/ALARM.
If you like to see failed login attempts (and the failure reason, eg Invalid Password), the you enable the audit alarm for that.

Even more.
If, for instance, you are interested is access of (a) specific file(s), you can configure to report accesses to that file(s).

Several of those events have (also) more specific and/or more consise info in dedicated utility recording files like ACCOUNTNG, SECAUDIT etc, and if you are really interested in those details, just ask.

btw, have you already tried HELP?
It _DOES_ supply a lot of assistence, and it tends to be less cryptic than "man"

Hope this helps,

Proost.

Have one on me.

Jan

[Uwe Zessin]

Jan:

http://www.faqs.org/rfcs/rfc3164.html

[Mobeen_1]

Geir,
I can assure you that VMS will certainly have most of the stuff that you are familiar about on different platformsh.

Looks like in simple language, you are looking for the following information

1. Where is all the system events log
maintained ?
2. What events are logged ?
3. Can i disable/enable certain logging ?

All the above could be done just like any other OS. We will get to those details in a min, may be in the next post.

But before that could you kindly elaborate and tell us ... what do you mean by syslog? Are you saying does VMS log events just like in some Unix flavours the events are logged to syslog ? Please clarify

rgds
Mobeen

[geir_2]

Hi,


Thanks Uwe Zessin, that's what I had in my mind.

The proposol that Jan van den Ende recommend is a good alternative to my problem.

Thanks to everyone. I will try the proposol that Jan recommend.

geir

[Jan van den Ende]

Ok Uwe,

I have read trough it.
Now I do understand the original question, AND I understand why I is unlikely to get much of a foothold in VMS:
Much too little info, much too little configurability, and much too cryptic info content for my liking.

I do see one advantage, and one only: if you are willing to be satisfied with this info, once you have learned what it means, then you will not have to learn it again for another platform (at least, as long as the impact of the content of the message is the same, which is all but guaranteed).

Proost.

Have one on me.

Jan

[Ian Miller.]

the other thing would be to send log messages to a central place for many systems running a variety of operating systems. E.g run a syslogd on windows (as Geir said he did) and have all your nodes send a subset of what they record to the central place.

Now what we need is for someone to write one which takes data from the audit server, ERRFMT, etc and sends a selected subset to another place. I expect there may be one in paid for products.