RE: newbie - Remote logging - Help

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



 
> 
> Hello,
> 
> I need to log the syslog messages from a host 192.168.1.10 to
> a host 192.168.1.3. Both are running Redhat 9 Linux.
> 
> There is no DNS in the network.
> 
> I did the following steps:
> 
> On the log server:
> ------------------
> 
> 1. I edited the /etc/services file to add the line
> 
> syslogd    514/UDP
> 
> 2. I stopped the syslogd with "service syslogd stop".
> 3. I restarted the network service too?
> 4. I srated the syslogd from command line using "syslogd -r"
> 
> Question: Can syslog do both remote (listen for other syslogs)
> and local logging (for the log server's messages)?

of course can.
you should edit /etc/syslogd.conf:

local7.debug            /var/adm/syslog/remote.syslog

See for more:
http://www.linuxjournal.com/article.php?sid=5476  syslog Configuration

 
http://www.precision-guesswork.com/sage-guide/syslog-overview.html syslog Overview
 
http://www.linux-mag.com/cgi-bin/printer.pl?issue=2000-09&article=guru Keeping Track of What Goes On
 
http://www.chinalinuxpub.com/doc/www.siliconvalleyccie.com/linux-hn/logging.htm  
Troubleshooting Linux With Syslog [you can read here about logrotate too!]


> 
> ---------------------
> On the remote machine:
> ---------------------
> 
> 1. I edited /etc/syslog.conf to add this line
> 
> *.info;mail.none;authpriv.none;cron.none              
> @mycomputer  -------> New line
> 
> *.info;mail.none;authpriv.none;cron.none               
> /var/log/messages -------> Deleted Line
>                                                              
>                   
> 2. In the /etc/hosts file I entered the line
> 
> 192.168.1.3   mycomputer
> 
> Problem: The syslogd failed to start.
> > 

Any messages on console/logfile?
***********************************************************************************
Information contained in this email message is intended only for use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify the postmaster@xxxxxxx and destroy the original message.
***********************************************************************************

-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux