Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Conﬁguring a System

Using Distributed Systems Administration Utilities

Chapter 3 217

b. Replace all the <%TYPE%> tokens with either tcp or udp depending on

the desired log transport.

c. Find the line: “destination d_syslog_<%TYPE%>{

<%TYPE%>(“<%IP%>”port(<%PORT>%>)); };.”

Replace <%IP%> with the IP address of the clog package. For TCP,

replace <%PORT%> with TCP port used for log forwarding (selected

above). For UDP, replace <%PORT%> with 514, the standard UDP port.

Step 4. The syslog-ng startup procedure, /sbin/init.d/syslog-ng, relies on

several conﬁguration variables. Edit /etc/rc.config.d/syslog-ng as

follows:

a. Change the CLOG_CONFIGURED line to:

CLOG_CONFIGURED=1

b. Add the following lines:

CLOG_CONSOLIDATOR=1

If using the TCP protocol, add:

CLOG_TCP=1

CLOG_TCP_PORT=<tcp port chosen for log consolidation>

otherwise, if using the UDP protocol, add:

CLOG_TCP=0

If consolidating the local syslogs, add:

CLOG_SYSLOG=1

otherwise, add:

CLOG_SYSLOG=0

If consolidating package logs of this cluster, add:

CLOG_PACKAGE=1

otherwise

CLOG_PACKAGE=0

c. Add the following two values which are used by the System Log

Viewer:

CLOG_LAYOUTS_DIR=/var/opt/dsau/layouts

CLOG_ADDITIONAL_LOG_DIRS[0]=/var/adm/syslog