OK, this is a long shot but I thought I would ask. All right here is my situation. The company I work for has several remote locations. All of these locations are connected over our internal WAN. One of these locations also has live internet access. At this location is a Cisco router as well as a Cisco PIX firewall. What our networking people want to do is find a way to capture the logs from the router and PIX firewall as they are currently just sitting on the respective device. So, know that Linux has something called a Syslog Daemon, I setup a Linux machine and shipped it to this location. I am told that both devices are now sending their logs to the linux machine. My questions is, does this work by default. Will the logs just go to /var/log ?? If anyone has any ideas or has ever done something like this, please tell me about it.

BTW, I have root access to this machine if it is necessary via ssh.


Thanks!

Hi..

By default Linux will accept logs from the local host.

U can enable the syslog daemon to accept syslogs from other devices by adding -r option in syslogd dameon.


edit /etc/rc.d/init.d/syslog file and add the -r option and restart the Demon.

It will work.