Central syslog server. (509 Views)
Reply
Regular Advisor
Amruth
Posts: 140
Registered: ‎03-10-2001
Message 1 of 6 (509 Views)
Accepted Solution

Central syslog server.

Hello people,

We are having a central syslog server.

The central logging server is a linux server and they have put the folloing entires in the definition file.....

#Log all messages to the central syslog server alpha
*.warn;*.err @10.10.10.10
authpriv.*;auth.* @10.10.10.10

I have been given the oppertunity to do this from the my RP8400s.

I have added the following in one of hpux server.

# vi /etc/syslog.conf

*.warn;*.err @10.10.10.10
authpriv.*;auth.* @10.10.10.10

and saved the file and restarted the syslogd

It is taking *.warn;*.err @10.10.10.10.

But for authpriv.*;auth.* @10.10.10.10..

syslog.log gives this error..
unknown priority name "*": No such device or address
unknown priority name "authpriv": No such device or address

Anybody have any idea...

Thanks in advance ...

AM

If i am doing the same way you are doing to me then what is the difference between us.
Please use plain text.
Trusted Contributor
Cesare Salvioni
Posts: 110
Registered: ‎02-14-2002
Message 2 of 6 (509 Views)

Re: Central syslog server.

hi,
that's because on hpux the facility authpriv is not a known facility.

The known facilities are:
kern user mail daemon auth lpr local0 to local7

while the priorities are:
emerg alert crit err warning notice info debug

See man 3 syslog or go to the following link to have a better description

http://docs.hp.com/cgi-bin/onlinedocs.py?mpn=B2355-90695&service=hpux&path=00/01/196&title=HP-UX%20R...

hope it helps
Please use plain text.
Honored Contributor
Ermin Borovac
Posts: 905
Registered: ‎09-18-2002
Message 3 of 6 (509 Views)

Re: Central syslog server.

On HP-UX you cannot use specification ".*" to select all priorities. To get the same effect you can use ".debug". That will log all messages for to the specified destination.

So change the second line to

auth.debug@10.10.10.10
Please use plain text.
Regular Advisor
Amruth
Posts: 140
Registered: ‎03-10-2001
Message 4 of 6 (509 Views)

Re: Central syslog server.

Can i use the fully qualified domain name instead of 10.10.10.10...

Tx,

Am
If i am doing the same way you are doing to me then what is the difference between us.
Please use plain text.
Honored Contributor
Con O'Kelly
Posts: 645
Registered: ‎03-18-2003
Message 5 of 6 (509 Views)

Re: Central syslog server.

Hi Amruth

Yes you can use hostname in place of IP address as long as your server can resolve the hostname.

Cheers
Con
Please use plain text.
Regular Advisor
Amruth
Posts: 140
Registered: ‎03-10-2001
Message 6 of 6 (509 Views)

Re: Central syslog server.

I have a new request.

How can i get a a failed login as an email from the central logging server.

Any idea...or thoughts...

TX,
AM
If i am doing the same way you are doing to me then what is the difference between us.
Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation