LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   how to generate syslogd events in AIX platform (https://www.linuxquestions.org/questions/linux-newbie-8/how-to-generate-syslogd-events-in-aix-platform-774456/)

nagendrar 12-09-2009 05:28 AM

how to generate syslogd events in AIX platform
 
I think, this question not belongs to this forum.But if any body knows please help me.

I want to generate syslogd events and forward to some ip <IP> from AIX system.
I did this following way

I added "*.* @<IP>" in /etc/syslog.conf file and
syslogd restarted with following two commands
stopsrc -s syslogd
startsrc -s syslogd

Now I am dumping syslogd events with "tcpdump src port 514" command to know whether syslog events generating or not.But I am not getting any syslogd event generation.

Please help me syslogd event generation and forwarding from AIX system

ThanQ,
Nagendra Rednam

TB0ne 12-09-2009 08:17 AM

Quote:

Originally Posted by nagendrar (Post 3785295)
I think, this question not belongs to this forum.But if any body knows please help me.

I want to generate syslogd events and forward to some ip <IP> from AIX system.
I did this following way

I added "*.* @<IP>" in /etc/syslog.conf file and
syslogd restarted with following two commands
stopsrc -s syslogd
startsrc -s syslogd

Now I am dumping syslogd events with "tcpdump src port 514" command to know whether syslog events generating or not.But I am not getting any syslogd event generation.

First, there is an AIX forum on this site, and this would be more appropriate there.

As to what you're trying to do, allowable syntax in AIX syslog.conf is different than linux. Linux lets you use a wildcard in both places ( *.*). AIX does not. I think you can only wildcard the facility,
not the priority. Check the default /etc/syslog.conf on AIX, it is
explained in the comments.

Try changing *.* to something like *.debug, or *.info, and see what you get then.

nagendrar 12-09-2009 11:44 PM

Now I added "*.crit /tmp/syslog.out" in /etc/syslog.conf file and restarted syslogd . Now I am trying for login with wrong password.But I am not getting any events in /tmp/syslog.out file.


Please help me how to get the events on AIX .

ThanQ,
Nagendra R

TB0ne 12-10-2009 12:28 PM

Quote:

Originally Posted by nagendrar (Post 3786194)
Now I added "*.crit /tmp/syslog.out" in /etc/syslog.conf file and restarted syslogd . Now I am trying for login with wrong password.But I am not getting any events in /tmp/syslog.out file.

Right...that's because a failed login isn't critical. If you're only sending *.crit messages along, that's not one of them. Read the man pages for the AIX syslog service, it'll explain the different facilities and what will generate an event.

jayaramprasad 03-30-2012 02:24 AM

There is a an option to get this work in AIX

/etc/syslog.conf

*.debug @10.0.15.21

TB0ne 03-30-2012 10:21 AM

Quote:

Originally Posted by jayaramprasad (Post 4640384)
There is a an option to get this work in AIX

/etc/syslog.conf

*.debug @10.0.15.21

Right...which is what I essentially told the OP. Also, you have reopened a THREE YEAR OLD THREAD..


All times are GMT -5. The time now is 08:35 AM.