Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Conﬁguring a System

Using Distributed Systems Administration Utilities

Chapter 3 225

CLOG_SSH=1

CLOG_SSH_PORT=<ssh port chosen>

otherwise , use:

CLOG_SSH=0

otherwise, if using the UDP protocol, use:

CLOG_TCP=0

If consolidating the local syslogs, use:

CLOG_SYSLOG=1

otherwise, use:

CLOG_SYSLOG=0

Step 4. When using TCP with ssh port forwarding , record the ssh port number

you chose above in the /etc/services ﬁle. For example, add the line:

clog_ssh 1776/tcp # Consolidated logging with ssh port forwarding

Add this line to the /etc/services ﬁle of this system.

Step 5. Test the conﬁguration by performing the following steps:

a. Run /opt/dsau/sbin/syslog-ng with the -s or --syntax-only

option to verify the syntax of the /etc/syslog-ng.conf ﬁle. This

should be a symbolic link to /etc/syslog-ng.conf.client as

described above.

b. Start syslog-ng using the following command:

# /sbin/init.d/syslog-ng start

c. If consolidating the local syslogs, use “logger

” and

make sure this message is in the consolidated syslog.log on the log

consolidation server. Note that the logger messages are ﬁrst sent to

the local syslog which forwards them to syslog-ng. syslogd by

default suppresses duplicate messages. If you issue multiple logger

test messages, make sure each is unique.