Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Configuring a System
Using Distributed Systems Administration Utilities
Chapter 3230
Consolidating
Package Logs on
the Log
Consolidation
Server
To consolidate the package logs forwarded from cluster clients to a Log
Consolidation Server, the following needs to be done on the Log
Consolidation Server:
Step 1. For each package that will be forwarded from a cluster client, add the
following destination, filter and log lines to the syslog-ng.conf.server file,
after the HP_AUTOMATED_LOG_FILE_CONSOLIDATION section.
destination d_<clu1>_<pkg1> { file(“<fs>/packages/<clu1>_<pkg1>.log”); };
filter f_<clu1>_<pkg1> { program(<clu1>_<pkg1>.log); };
log { source(s_syslog_<type>);
filter(f_<clu1>_<pkg1>);destination(d_<clu1>_<pkg1>); flags(final);};
where <pkg1> is the package name, <clu1> is the cluster alias that is
forwarding this package log, and <fs> is the filesystem on the log
consolidator where the consolidated logs will be stored.
Step 2. If the log consolidator is a Serviceguard cluster, make sure to copy the
edited /etc/syslog-ng.conf.server file cluster-wide as follows:
# ccp /etc/syslog-ng.conf.server /etc/
Step 3. sighup syslog-ng on the log consolidator, so that it re-reads its
configuration file. (sighup is a UNIX method for restarting a process.)
On a Serviceguard log consolidator, sighup syslog-ng only on the
adoptive node of the clog package.
Step 4. For each package that is deleted from a cluster client that is forwarding
its package logs, delete the corresponding destination, filter and log lines
from the /etc/syslog-ng.conf.server file of the log consolidator.
syslog-ng on the log consolidator will need to be sighup’d so that it
re-reads this configuration file. On a Serviceguard log consolidator, the
updated /etc/syslog-ng.conf.server file will need to be distributed
cluster-wide. However, the sighup of syslog-ng only needs to be done on
the adoptive node of the clog package.
Disabling Log Consolidation
The clog_wizard enables log consolidation configurations but does not
have an unconfigure or deconfigure option. Thus you must disable a
system from participating in log consolidation manually, using the
following instructions.