Infrastructure Software

Hi Guys,

Would like to ask how can I enable send the logs on the Syslog Server remotely.

I already define the ip-address of the syslog server(gfi eventmanager software) on the host file.

0825AM0198(Primary)#more /etc/hosts
192.168.200.48 BPRTA
192.168.100.42 switch2

192.168.200.14 loghost

and in the syslog.conf
0825AM0198(Primary)# more /etc/syslog.conf
#ident "@(#)syslog.conf 1.5 98/12/14 SMI" /* SunOS 5.0 */
#
# Copyright (c) 1991-1998 by Sun Microsystems, Inc.
# All rights reserved.
#
# syslog configuration file.
#
# This file is processed by m4 so be careful to quote (`') names
# that match m4 reserved words. Also, within ifdef's, arguments
# containing commas must be quoted.
#
*.err;kern.notice;auth.notice /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit /var/adm/messages

*.alert;kern.err;daemon.err operator
*.alert root

*.emerg *
*.err;kern.debug;daemon.notice;mail.crit @loghost

# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice ifdef(`LOGHOST', /var/log/authlog, @loghost)

mail.debug ifdef(`LOGHOST', /var/log/syslog, @loghost)

#
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
#
ifdef(`LOGHOST', ,
user.err /dev/sysmsg
user.err /var/adm/messages
user.alert `root, operator'
user.emerg *
)

after this i disable and enable the syslogd services but still no activity on the SYSLOG SERVER. We already rebooted the Syslog Server as well.

Hope you could enlighten me.

THanks in advance.