Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Conﬁguring a System

Using Distributed Systems Administration Utilities

Chapter 3 227

e. The /etc/syslog.conf is speciﬁc to each member and the edits

described above must be performed on each cluster member.

f. Making the above changes on each cluster member, syslogd must be

restarted for these changes to take effect. Use cexec to do this on all

members of the cluster:

# cexec “/sbin/init.d/syslogd stop;/sbin/init.d/syslogd start”

Step 2. To conﬁgure syslog-ng, start with the same syslog-ng.conf templates

used by the clog_wizard.

On one cluster member, copy the

/opt/dsau/share/clog/templates/syslog-ng.conf.client.templa

te to /etc/syslog-ng.conf.client. This ﬁle contains tokens named

<%token-name%> which are replaced by the wizard based on the

administrator’s answers to the wizard’s questions.

Manually replace the tokens in /etc/syslog-ng.conf.client as

follows:

a. If conﬁguring the cluster to forward its syslogs to the consolidation

server, replace the <%UDP_LOOPBACK_SOURCE%> token with:

source s_syslog_udp { udp(port(514)); };

Replace the <%UDP_LOOPBACK_LOG%> token with:

log { source(s_syslog_udp); destination(d_syslog_<type>); };

where <type> is either tcp or udp depending on the desired log

transport. This causes syslog-ng to read the local syslogd’s UDP

messages and send them to the log consolidation server. If you do not

want to consolidate the local syslogs of this cluster, delete the

<%UDP_LOOPBACK_SOURCE%> and <%UDP_LOOPBACK_LOG%> tokens.

b. Replace all the <%TYPE%> tokens with either tcp or udp depending on

the desired log transport.

c. Find the line

“destination d_syslog_<%TYPE%> {<%TYPE%>(“<%IP%>”port(<%PORT%>)); };”

If using the UDP protocol, replace <%IP%> with the IP address of the

log consolidation server and <%PORT%> with 514, the standard UDP

port. If using TCP protocol with ssh port forwarding, replace <%IP%>

with 127.0.0.1 and <%PORT%> with the port chosen for ssh port

forwarding. The same guidelines for choosing a free syslog-ng TCP