Next generation single-system management on HP-UX 11i v2 (B.11.23)

• Offers standard UDP and additional TCP transports

• Allows consolidation of arbitrary text based log files

• Allows significantly more powerful filtering and log rotation

Figure 16. Consolidated logging architecture

It is standard feature of the UNIX syslog daemon to be able to forward syslog messages through UDP

to a remote log file consolidator or “syslog sink.” There are several issues with this approach. First, it

is UDP-based so it is possible to lose messages. Second, it applies to syslog data only.

DSAU provides several extensions in this space. The data can be transported through UDP or TCP.

Using TCP offers the ability to increase the security of the data on the LAN using tools like SSH

tunneling to encrypt potentially sensitive syslog data. Also, arbitrary textual log files can be

consolidated.

It is especially useful in a Serviceguard cluster in which the per-member package logs can now be

consolidated into a single file to ease maintenance and problem diagnosis.

Use the HP SMH System Log Viewer to filter and view a system's local syslog log files. For a system

that is also a log consolidator, the System Log Viewer also filters and displays the consolidated logs.

From the HP SMH, system administrators can take advantage of viewing the consolidated logs from

the Logs>clog viewer>svv clog viewer page.

The System Log Viewer displays the syslog-related logs for the system. By default, this includes the

local logs for the system from /var/adm/syslog. If this system is also a log consolidator, the

consolidated logs are also listed. For more information, see

http://docs.hp.com/en/

B2355-90950/ch03s04.html