LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris
User Name
Password
Solaris / OpenSolaris This forum is for the discussion of Solaris, OpenSolaris, OpenIndiana, and illumos.
General Sun, SunOS and Sparc related questions also go here. Any Solaris fork or distribution is welcome.

Notices


Reply
  Search this Thread
Old 02-16-2010, 03:00 AM   #1
tikit
Member
 
Registered: Feb 2008
Posts: 85

Rep: Reputation: 16
How to specify facility when logging to remote server


Hi,

We have couple of Solaris servers and a linux management station. I would like to configure the Solaris servers to send all logs to linux station with a set facility (local1). The configuration looks like this:
Solaris
Code:
*.*             @192.168.2.2
Linux NMS
Code:
local1.*                        /var/log/solaris.log
My question is how to set the Solaris syslog to send its logs to remote host to local1 facility. I tried lots of options like
Code:
*.*             @192.168.2.2.local1
or
Code:
*.*             @192.168.2.2:local1
but without any success.
Thanks for helping.
 
Old 02-16-2010, 11:10 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Messages get logged with a certain facility / priority pair, it's not like you'd change facility / priority on sending AFAIK. local[0-7] is commonly used for custom logging from applications where they can't or shan't use the "common" facility / priority pairs. If you need extensive filtering capabilities see Syslog-NG.
 
Old 02-16-2010, 05:11 PM   #3
tikit
Member
 
Registered: Feb 2008
Posts: 85

Original Poster
Rep: Reputation: 16
Thanks for the reply. The goal is to send all log entries from Solaris servers to one common file (/var/log/solaris.log) to a remote syslog server. I am looking for something similar to setting logging facility on Cisco devices. For example
Code:
logging facility 17
makes the device to log to local1. Is it possible to set anything similar on linux or solaris servers?
 
Old 02-18-2010, 08:48 AM   #4
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Mint
Posts: 17,809

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
Moving to Solaris
 
Old 02-18-2010, 01:20 PM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by tikit View Post
Thanks for the reply. The goal is to send all log entries from Solaris servers to one common file (/var/log/solaris.log) to a remote syslog server. I am looking for something similar to setting logging facility on Cisco devices. For example
Code:
logging facility 17
makes the device to log to local1. Is it possible to set anything similar on linux or solaris servers?
A messages facility / priority gets set by the source (syslog, 'logger -p local1.info') and not by the destination. I think you really, really should check out Syslog-NG and its filtering capabilities.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[syslog-ng] logging remote server by IP address noir911 Linux - Server 4 06-22-2018 08:01 AM
Logging into a remote server anaigini45 Linux - Newbie 5 01-03-2010 06:56 AM
logging message on both remote and local server noir911 Linux - Server 4 10-22-2008 11:51 PM
logging to a remote syslog server is dropping packets draeician73 Linux - Security 1 10-20-2004 06:19 PM
remote logging linuxboy69 Linux - Software 3 02-25-2004 04:30 PM

LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris

All times are GMT -5. The time now is 06:48 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration