Want to setup A Log Server?

your_shadow03 · 05-14-2009, 01:03 AM

I am in search of a tool which would help me setup a central Logging Server for all my 20 machine on which Unix and Linux are running?

hw-tph · 05-14-2009, 01:28 AM

sysklogd and syslog-ng both handle remote logging without any problem. I suggest you just use the default for your distribution and configure it to accept logs from remote computers.

chrism01 · 05-14-2009, 02:36 AM

Well for syslogd systems:

Quote:

However, by default, syslogd is configured to only receive messages via the loopback adapter. To allow remote receipt (on the central receiving log server), modify the /etc/sysconfig/syslog, by adding a -r switch to the list of options in the existing SYSLOGD_OPTIONS variable.

Modify the sending log server's /etc/syslog.conf, by adding a line matching the facility and priority
that you want to forward to the IP address of the central receiving log server:

*.warn @192.168.0.101

The above will forward messages of a warning priority or higher coming from all facilities to the central server at 192.168.0.101.