Managing Systems and Workgroups: A Guide for HP-UX System Administrators
Configuring a System
Using Distributed Systems Administration Utilities
Chapter 3 213
Create the configuration files described below on every cluster member.
The simplest approach is to configure one member completely and then
copy each configuration file cluster-wide. The cexec and ccp tools can
simplify replicating changes cluster-wide.
For a cluster configuration, syslog-ng is configured as a package so the
log consolidation service is highly available. The package must be named
clog and the package configuration files require the following
information:
• Registered IP address and DNS name for the clog package
• The subnet associated with that IP address
• Cluster-wide storage configuration using LVM or VxVM
• A filesystem configured on the cluster-wide storage, that can be VxFS
or CFS. Since consolidated logs grow rapidly, HP recommends that
the filesystem be configured using the largefiles option and that
there is room for growth.
Complete IP address registration and storage/filesystem configuration
before continuing. For additional information on creating the
Serviceguard storage/filesystem configuration for a package, refer to the
Managing Serviceguard manual.
Refer to section “Cluster Configuration Notes” on page 201 for an
overview of how to configure consolidated logging in a cluster.
Step 1. If you want the local syslog messages for the cluster itself to be part of
the consolidated syslog, complete the following tasks:
a. Start by configuring the standard syslogd to co-exist with a
syslog-ng consolidator. By default, syslogd is listens for incoming
log messages on UDP port 514. To use the UDP protocol or
consolidate this server’s local syslogs, syslog-ng must listen on
UDP port 514. Edit etc/rc.config.d/syslogd and change
SYSLOGD_OPTS to add the -N switch to prevent syslogd from
listening on port 514. For example:
SYSLOGD_OPTS=“-D -N”
b. Edit the /etc/syslog.conf file to forward log messages to UDP port
514 on the local host where they will be read by syslog-ng. Using the
HP-UX default /etc/syslog.conf as the example, add the following
lines: