Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Configuring a System
Using Distributed Systems Administration Utilities
Chapter 3204
You can configure this cluster clustername as either:
- Consolidation server
- Client that forwards logs to a remote consolidation
server
Do you want to configure clustername as a Consolidation
Server? (y/n) [y]: n
Answer “No” here. At this point you are configuring a log forwarding
client. The wizard displays the following:
You now need to specify what system will be the
consolidator. If the consolidator is a Serviceguard
cluster, you should specify the IP address of the "clog"
Serviceguard package for this question. The "clog"
package is used to make log consolidation highly
available on the consolidator.
The consolidation server must already be configured.
Enter the hostname or IP address of the consolidator?
[]: clog.usa.xyz.com
After entering the hostname or IP address of the log consolidation server,
the wizard asks if you want to use the TCP transport when forwarding
log messages:
You can choose to forward logs to the consolidator via
the UDP protocol or the TCP protocol (recommended).
Do you want to use the TCP protocol? (y/n) [y]:
Standard syslogd forwards messages using the UDP protocol. UDP is a
high-performance, broadcast-oriented protocol with no flow control or
message delivery verification. syslog-ng supports syslogd’s UDP
protocol and a TCP protocol. The TCP transport offers both flow control
and message delivery checks. However, since TCP is a
connection-oriented protocol, it requires additional resources on the log
consolidation server. The consolidation server’s max-connections()
attribute must be set according to the maximum number of expected