Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Conﬁguring a System

Using Distributed Systems Administration Utilities

Chapter 3 209

mail.debug @

*.info;mail.none @

where

is the fully qualiﬁed domain name

of the consolidation server. The name must be fully qualiﬁed or syslogd

will not forward the messages properly. Note that there must be a <tab>

before each @ sign.

If you have customized syslog.conf, make sure to add the forwarding

lines for your customizations as well.

syslogd must be stopped and restarted for these changes to take effect,

using the following commands:

# /sbin/init.d/syslogd stop

# /sbin/init.d/syslogd start

With syslogd appropriately conﬁgured, now conﬁgure syslog-ng. Start

with the same syslog-ng.conf templates used by the clog_wizard.

Copy

/opt/dsau/share/clog/templates/syslog-ng.conf.server.template

to /etc/syslog-ng.conf.server. This ﬁle has tokens named

<%token-name%>

that are replaced by the wizard based on the

administrator’s answers to the wizard’s questions.

Replace the tokens as follows:

• When using the TCP protocol and conﬁguring the consolidation

server to consolidate its own syslogs, replace the

<%UDP_LOOPBACK_SOURCE%> token with:

source s_syslog_udp { udp(port(514)); };

Replace the <%UDP_LOOPBACK_LOG%> token with:

log { source(s_syslog_udp); destination(d_syslog_tcp); };

This causes the syslog-ng consolidator to read the local syslogd’s

UDP messages and send them to syslog-ng on the local TCP port.

Optionally, the destination could be set to be the local consolidation

ﬁle directly, (destination(d_syslog) in this default template), but

this conﬁgures the consolidation server client components in the