send log messages to another system

anurag1510 · 09-19-2005, 07:16 PM

Hi,

I am trying to set up a centralized log server. I want the logs from all my systems to go to one particular server. So on the system that I intend setting up as a log server, I edited the /etc/sysconfig/syslog file to include the -r option in the following line:

SYSLOGD_OPTIONS="-m 0 -r"

However, I have another problem. I want to be able to send the logs of each system to a different file. How can that be done? Any help is greatly appreciated.

Thanks,
Anurag

Matir · 09-19-2005, 10:14 PM

The only way I'm aware of would be to output messages to a pipe to a process that can then separate them by host.

anurag1510 · 09-20-2005, 07:51 AM

Hi,

Thanks for the response. I figured out that it cannot be done with the standard syslog.

- Anurag

xaeniac · 09-22-2005, 10:09 AM

Can you please help? I modified my syslog.conf

*.* @X.X.X.X

I have also added a hostname and tried it here also. I am able to ping the syslog server just fine. I know it works as other machines (solaris boxes are sending data to it) I have restarted the syslog service along with rebooting the whole system.

What steps am i missing? Thanks in advance

anurag1510 · 09-22-2005, 09:19 PM

Hi,

Have you configured the log server to accept logs? You would have to edit the /etc/sysconfig/syslog file to have the following line:

SYSLOGD_OPTIONS="-m 0 -r"
After that is done, you will have to restart syslogd

- Anurag

xaeniac · 09-27-2005, 12:57 PM

I am not sure, but considering many other machines and cisco devices are sending logs to the syslog server, I would imagine so. Any other thoughts?

xaeniac · 10-03-2005, 08:53 AM

banzai_slr · 10-11-2005, 06:19 AM

have you looked at netdump?
Netdump will allow you to send all syslog&console messages to a netdump server. Very handy if you experience a panic and the dozy sysadmin does not capture the trace