Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

How to centralized logging on Solaris 10 servers (Beginner Question)

3 views
Skip to first unread message

underh20

unread,
Oct 26, 2009, 7:58:54 PM10/26/09
to
Dear Sir/Madam,

We have six Solaris 10 servers in different locations. Each server
collects and hosts all its user access/system activities/hardware-os
logs.
I need to send all these logs on a very regular basis to a
centralized locations which is another Unix server, a Window server
and a designated recipient's email account.
Is there freeware or commercial product out there for it? I need
to find a centralized logging tool that's not expensive and very
straight-forward to setup.


Thanks for your advice,

Bill

webjuan

unread,
Oct 26, 2009, 8:44:22 PM10/26/09
to

Have you looked at stslog-ng? http://www.balabit.com/network-security/syslog-ng/

webjuan

unread,
Oct 26, 2009, 9:09:39 PM10/26/09
to

Typo: stslog-ng = syslog-ng

hume.sp...@bofh.ca

unread,
Oct 27, 2009, 8:55:30 AM10/27/09
to
In comp.unix.solaris underh20 <underh20.s...@gmail.com> wrote:
> Is there freeware or commercial product out there for it? I need
> to find a centralized logging tool that's not expensive and very
> straight-forward to setup.

Do you need something more complex than simply configuring syslog on your
machines to log to the central Unix machine?

--
Brandon Hume - hume -> BOFH.Ca, http://WWW.BOFH.Ca/

John Gordon

unread,
Oct 27, 2009, 2:02:12 PM10/27/09
to
In <8aa91818-75e3-496a...@y10g2000prg.googlegroups.com> underh20 <underh20.s...@gmail.com> writes:

> Dear Sir/Madam,

> We have six Solaris 10 servers in different locations. Each server
> collects and hosts all its user access/system activities/hardware-os
> logs.
> I need to send all these logs on a very regular basis to a
> centralized locations which is another Unix server, a Window server
> and a designated recipient's email account.

By "send all these logs", do you just mean copy the files to the other
locations?

Once sent, what do you want to happen to the local logs? Should they
be archived and a new logfile started, or will each submission contain
duplicate data from the last time plus some new data?

Do you want the central hosts to perform any sort of collation or
aggregation of the logs, or will they exist simply as lots of files in a
directory somewhere?

--
John Gordon A is for Amy, who fell down the stairs
gor...@panix.com B is for Basil, assaulted by bears
-- Edward Gorey, "The Gashlycrumb Tinies"

webjuan

unread,
Oct 27, 2009, 11:13:50 PM10/27/09
to

Check out this presentation by Blog O’ Matty called "Centralized
Logging With syslog-ng" at http://prefetch.net/presentations/CentralizedLoggingSyslogNG.pdf

0 new messages