loghost Syslog.conf

From: Ed Skolnik (eskolnik@interpublic.com)
Date: Wed Nov 05 2003 - 17:35:39 EST


I need help in setting up shipping logs to a log server, I have looked at the
posting from John Rams from April 2003, but I still
don't understand the statement
" mail.debug ifdef(`LOGHOST', /var/log/syslog, @loghost)
" in my syslog.conf file.

Now can I ship all logs?

ed

________________________________________________________________________

Syslog.conf

Message: 7

Date: Sat, 26 Apr 2003 00:40:23 -0700

From: "John Rams" <johnrams@cox.net>

Subject: Summary: syslog configuration Help

To: <sunmanagers@sunmanagers.org>

Message-ID: <004e01c30bc7$188199d0$6501a8c0@svakahome>

Content-Type: text/plain; charset="iso-8859-1"

Many thanks to Mark Hargrave,Alan Angulo and Jay Lessert. Sorry for late
summary.

Alan mentoned the need to restart /etc/init.d/inetsvc for loghost to take
effect after you change your /etc/hosts. Still not sure if
i have to. But log are being redirected to the loghost.

***************

0) man syslog.conf

Understand the "facility", "level", and "action" parts of syslog.conf

1) Edit /etc/hosts in all machines and add the "loghost" alias.

example: 123.123.123.123 admin-machine loghost

2) Edit /etc/syslog.conf and tell the other 3 machines where to send the

messages.

example: auth.notice ifdef(`LOGHOST', /var/log/authlog, @loghost)

3) HUP the syslog daemon an all machines:

kill -HUP `cat /etc/syslog.pid`

********************

*.err;kern.debug;daemon.notice;mail.crit;user.none<tab>@hostname

Where "hostname" is the system you want to receive the messages.

Don't forget to restart the syslogd daemon.

***********
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:27:25 EDT