Posted on 2003-11-27
Here is what i have managed to do till now.
1. I have made the client machines to forward thier logs to a single SYSLOG server by editing thier syslog.conf. I have also configured the MAXTNT to forward its logs to to the syslog server.
2. It is confirmed that enrty " syslog 514/udp " exists in /etc/services.
3. I have changed the /etc/sysconfig/syslog SYSLOGD_OPTIONS = " -m 0 -r " .
4. Restarted the syslog and verified that -r option is activated.
Now I need to know what should I do to separate local machine's logs and network machines logs. What if I want to store MAXTNT's / Cisco Router / Cisco Switch logs in a separate directory. I know that I should be editing the file syslog.conf, but what should I put there ?