RE: Consolidate logwatch message from all servers to 1 server
"Sharpe, Sam J" <sam.sharpe-AQ/[email protected]>
| Newsgroups | gmane.linux.redhat.release.taroon.general |
|---|---|
| Message-ID | <[email protected]> |
> >b) change /etc/syslog.conf on each machine to point to that server, > > which part of /etc/syslog.conf that I can point to another > unix machine on the network, what is the format ? I answered this earlier. 1) setup a syslog server On logmachine.example.com you need to start syslogd with the -r switch to enable accepting remote log messages. On RedHat that's done by editing /etc/sysconfig/syslog and adding -r to SYSLOGD_OPTIONS so it looks like: SYSLOGD_OPTIONS="-m 0 -r" 2) setup the clients to syslog to remote server To set machines to log centrally, edit /etc/syslog.conf and add a line like: *.info @logmachine.example.com -- Sam -- Taroon-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/taroon-list