Syslog.conf

[cndcadams]

Question= How do I get files to be logged into a specifc file on a remote server.


What I have done;

Edited syslog.conf on remote client to send messages to server. This works but I want the files to be logged into a specific file not an existing one.

What is happening is when I reboot the client my /var/adm/messages file on my server is being written to.
I want to create a /var/adm/messages.v240 for example.


My syslog.conf entry on my client is:

*.err;kern.debug;daemon.notice;mail.crit @server


How do I specify a file after @server as I have tried example

@server:/var/adm/messages.v240

This does not work.

I will keep reading man and doing my own searching but figured someone here has the answer.


Thanks

CA

 

[mbrooks]

Your syslog.conf should look something like this.

NOTE: Must be seperated by tabs not spaces.

*.err;kern.debug;daemon.notice;mail.crit    /var/adm/messages.v240

M. Brooks

http://mbrooks.info

 

[cndcadams]

mbrooks;

I can try this but won't this just create a file called /var/adm/messages.v240 on the client. how does it know to send the file to the server?

Any docs I can reference?


Thanks

CA

 

[daFranze]

by typing @servername you are just sending all syslog entries to servername
on host servername you need to edit syslog.conf

btw, you can not have a
/var/adm/messages.server1
/var/adm/messages.server2
and so on, syslog will write all data from any host to the same file


Best Regards, Franz
--
UNIX System Manager from Munich, Germany

 

[cndcadams]

daFranze;

Thanks for the response. Although it was not the response I was hopeing for. It would be nice if you could create different files on the server based on the client so you would not have to look through messages file for a specifc client.

In searching for syslog.conf stuff I saw something about syslog-ng, does anyone know if this has the capability I am looking for.


Thanks

CA

 

[huebs]

Yes, syslog-ng is the way. You can filter by hostname. Have a look at Nate Campi's page

http://www.campin.net/syslog-ng/faq.html

and

http://www.campin.net/newlogcheck.html#syslog-ng

for examples.

Regards,
Huebs
===

 

[cndcadams]

huebs;

thank you for the information.

CA