LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 06-04-2008, 01:20 PM   #1
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,249

Rep: Reputation: 53
I need help getting syslog to log remotely, this is just the regular syslog.


I need help getting syslog to log remotely, this is just the regular syslog.

on the local server, in syslogd.conf I have
authpriv.* @xx.xx.xx.xx

Where xx.xx.xx.xx is the IP of the remote syslog server

And on the remote syslog server, I started syslog with syslogd -r

But its not logging anything.

#1. Where does it put the logs? would authpriv goto /var/log/secure?

#2. how come the local server is not sending anything? I even ran
# tcpdump dst xx.xx.xx.xx
on the local server and no traffic is going to the remote syslog server.

TIA!
 
Old 06-04-2008, 11:39 PM   #2
raghuvamsi
LQ Newbie
 
Registered: May 2008
Posts: 20

Rep: Reputation: 0
hi

To configure the machine as a centralised syslog server and to accept log messages from remote machines,
edit the /etc/sysconfig/syslog file and include -r option in SYSLOGD_OPTIONS variable as shown below:

# Options to syslogd
# -m 0 disables 'MARK' messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages recieved with -r
# See syslogd(8) for more details
SYSLOGD_OPTIONS="-m 0 -r"
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
# once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS="-x"

Once this is done, restart the syslog service.
#service syslog restart

Configuring the Client Machine
Edit the /etc/syslog.conf file to make the syslog messages send to the new loghost. Append these lines to the file:

*.debug @loghost
*.debug /var/log/messages

Note: loghost is the hostname of the centralised syslog server.
Once this is done, restart the syslog service.

#service syslog restart

It will now send all debug messages to the remote loghost.
 
Old 06-05-2008, 11:36 AM   #3
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,249

Original Poster
Rep: Reputation: 53
Thanks! That worked.

Now I will see if I can get that to work with rsyslog.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to change Debian log rotation of syslog and daemon.log onmountain Linux - Newbie 2 07-31-2008 02:27 AM
syslog client to log to syslog-ng and itself noir911 Linux - Server 1 02-08-2008 09:51 AM
Why syslog doesn't log? zivota Red Hat 3 11-01-2006 10:56 AM
LXer: Centralized Syslog Server Using syslog-NG LXer Syndicated Linux News 0 04-28-2006 06:21 PM
/var/log/syslog George666 Slackware 4 03-19-2004 07:34 AM


All times are GMT -5. The time now is 08:23 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration