I think, this question not belongs to this forum.But if any body knows please help me.

I want to generate syslogd events and forward to some ip <IP> from AIX system.
I did this following way

I added "*.* @<IP>" in /etc/syslog.conf file and
syslogd restarted with following two commands
stopsrc -s syslogd
startsrc -s syslogd

Now I am dumping syslogd events with "tcpdump src port 514" command to know whether syslog events generating or not.But I am not getting any syslogd event generation.

Please help me syslogd event generation and forwarding from AIX system

ThanQ,
Nagendra Rednam

First, there is an AIX forum on this site, and this would be more appropriate there.

As to what you're trying to do, allowable syntax in AIX syslog.conf is different than linux. Linux lets you use a wildcard in both places ( *.*). AIX does not. I think you can only wildcard the facility,
not the priority. Check the default /etc/syslog.conf on AIX, it is
explained in the comments.

Try changing *.* to something like *.debug, or *.info, and see what you get then.

Now I added "*.crit /tmp/syslog.out" in /etc/syslog.conf file and restarted syslogd . Now I am trying for login with wrong password.But I am not getting any events in /tmp/syslog.out file.


Please help me how to get the events on AIX .

ThanQ,
Nagendra R

Right...that's because a failed login isn't critical. If you're only sending *.crit messages along, that's not one of them. Read the man pages for the AIX syslog service, it'll explain the different facilities and what will generate an event.

There is a an option to get this work in AIX

/etc/syslog.conf

*.debug @10.0.15.21

Right...which is what I essentially told the OP. Also, you have reopened a THREE YEAR OLD THREAD..