How to configure central log server in tru64.

[skiran]

Hello All,

How to configure central log server in tru64?
I added loghost entry in /etc/hosts and syslog.conf and restarted syslog daemon. It doesnt work.

Thanks & Regards,
shashi

[Michael Schulte zur Sur]

Hi,

can you explain what you expect from this central log server?

greetings,

Michael

[Ivan Ferreira · Accepted solution]

Unless the domain host name of a remote host is entered in the local
/etc/syslog.auth file, the local system does not log any syslog messages
from that remote host.

If you intend to make syslogd secure on your
system, and you have configured or intend to configure other hosts to
forward syslog messages to the system, complete the following steps:

Use the su command to become the superuser (root).

Create the /etc/syslog.auth file using a text editor.

Add the names of any remote hosts that are allowed to forward syslog
messages to the local system to the /etc/syslog.auth file.

Ensure that the /etc/syslog.auth is owned by root.

Ensure that the /etc/syslog.auth have its permissions set to 0600.

Specify the -R option when starting the daemon if you do not want the
syslogd daemon to create an inet port to listen for events being sent by
remote hosts. To make this the default mode of operation, edit the startup
command line in the /sbin/init.d/syslog file. Using the -R option
means that the syslogd daemon cannot forward events to other systems.

[skiran]

Thanks Mr. Ferreira ..


Could pls provide the sample syslog.conf file which should send logs to local file and also remote log server.

Thanks.
shashi