Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

syslog to local host and remote log host in Solaris 10 - HELP !!

269 views
Skip to first unread message

underh20

unread,
Oct 27, 2009, 6:18:19 PM10/27/09
to
We have the generic Solaris 10 syslog.conf file below. How does one
modify this file to have the entries of /var/adm/messages, /var/log/
authlog and /var/log/syslog appear at the local server and also appear
in the same three files at the remote log host ?

Basically, we need local and remote logging of the same logs to take
place.

Thanks,

Bill

</etc/syslog.conf>

# syslog configuration file.
#
# This file is processed by m4 so be careful to quote (`') names
# that match m4 reserved words. Also, within ifdef's, arguments
# containing commas must be quoted.
#
*.err;kern.notice;auth.notice /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit /var/adm/messages

*.alert;kern.err;daemon.err operator
*.alert root

*.emerg *

*.info @loghost

# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice ifdef(`LOGHOST', /var/log/authlog,
@loghost)

mail.debug ifdef(`LOGHOST', /var/log/syslog,
@loghost)

#
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
#
ifdef(`LOGHOST', ,
user.err /dev/sysmsg
user.err /var/adm/messages
user.alert `root, operator'
user.emerg *
)

Message has been deleted
0 new messages