logging server

[nathan r. hruby]

On Fri, 22 Nov 2002, Jonathan Smith wrote:

> Has anybody managed to setup a logging server using syslogd and 
> yellowdog?  We've got several Portmaster 3's that send information to a 
> logging server.  Unfortunately that server is slowly dying.  I'd like 
> to replace it with a machine running yellowdog but I'm not having a lot 
> of luck w/ syslogd.
> 

Make sure there are allow entries for the portmasters in /etc/hosts.allow 
and that port 514 is not blocked by a firewall.

> I've got 1 PM3 pointing to the new log server and I have syslogd 
> starting with the "-r" flag on the new logging server.  However nothing 
> is appearing is any of the logs on that machine.  There's an entry for 
> syslogd in /etc/services.  I think it may be a problem in the 
> syslog.conf file but I can't find information on how to setup a logging 
> server.
>

Did you restart syslog after making the change to the startup file and 
the conf file?
 
> 
> # auth and user - pm3
> user.*                                                  
> /var/log/user.log
> auth.*                                                  
> /var/log/auth.log
> 

If these are wrapped due to email, ignore this, but they should be on the 
same line :)  Also, make sure the files that are indicated above actually 
are there, in not 'touch' them and syslog should start logging to them.

HTH,

-n
-- 
----------------------------------------
nathan hruby <nathan@drama.uga.edu>
computer services specialist
uga drama
http://www.drama.uga.edu/support/
----------------------------------------