Hi,
I am running CentOS 5 and I tried to config flowing statement in syslog.conf to send syslog messages to a remote server running on FC 9, but it did not work. There was nothing send to the FC9.
"*.info;mail.none;authpriv.none;cron.none @@192.168.1.5"
Could anyone advice whether the syslog in CentOS 5 does not support remote server, or I could be missing something?
System:
DISTRO_NAME=centos DISTRO_VERSION=5 DISTRO_CODENAME=final DISTRO_PATCHLEVEL=5 DISTRO_ARCH=x86_64 DISTRO_KERNEL=2.6.18_53.el5
Thank you.
Kind Regards,
jupiter
hce wrote:
Hi,
I am running CentOS 5 and I tried to config flowing statement in syslog.conf to send syslog messages to a remote server running on FC 9, but it did not work. There was nothing send to the FC9.
"*.info;mail.none;authpriv.none;cron.none @@192.168.1.5"
Could anyone advice whether the syslog in CentOS 5 does not support remote server, or I could be missing something?
Try just one @ instead of two?
Also is the FC9 system configured to receive messages? You can use the 'logger' command to send custom messages with user defined priority/facility for testing purposes as well.
nate
Hi,
1 .One is enough and the remoter server should be configured to accept the syslog.
2. double quotes are not required.
Shyam
On Thu, May 21, 2009 at 11:01 AM, nate centos@linuxpowered.net wrote:
hce wrote:
Hi,
I am running CentOS 5 and I tried to config flowing statement in syslog.conf to send syslog messages to a remote server running on FC 9, but it did not work. There was nothing send to the FC9.
"*.info;mail.none;authpriv.none;cron.none @@192.168.1.5"
Could anyone advice whether the syslog in CentOS 5 does not support remote server, or I could be missing something?
Try just one @ instead of two?
Also is the FC9 system configured to receive messages? You can use the 'logger' command to send custom messages with user defined priority/facility for testing purposes as well.
nate
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
On Wed, 20 May 2009, nate wrote:
hce wrote:
I am running CentOS 5 and I tried to config flowing statement in syslog.conf to send syslog messages to a remote server running on FC 9, but it did not work. There was nothing send to the FC9.
"*.info;mail.none;authpriv.none;cron.none @@192.168.1.5"
Could anyone advice whether the syslog in CentOS 5 does not support remote server, or I could be missing something?
Try just one @ instead of two?
The double @ is for using tcp/514 instead of udp/514, which is more reliable. But you need to configure it correctly on the server to make sure it accepts the traffic. The rsyslog.conf manpage has some info, the documentation in /usr/share/doc/rsyslog contains the details.
Kind regards,
On Fri, May 22, 2009 at 12:59 AM, Dag Wieers dag@centos.org wrote:
On Wed, 20 May 2009, nate wrote:
hce wrote:
I am running CentOS 5 and I tried to config flowing statement in syslog.conf to send syslog messages to a remote server running on FC 9, but it did not work. There was nothing send to the FC9.
"*.info;mail.none;authpriv.none;cron.none @@192.168.1.5"
Could anyone advice whether the syslog in CentOS 5 does not support remote server, or I could be missing something?
Try just one @ instead of two?
The double @ is for using tcp/514 instead of udp/514, which is more reliable. But you need to configure it correctly on the server to make sure it accepts the traffic. The rsyslog.conf manpage has some info, the documentation in /usr/share/doc/rsyslog contains the details.
The rsyslog.conf in FC 9 is much easy to be configured, just enable the InputTCPServerRun and ModLoad. It is not the problem in FC 9 rsyslog server, it is the problem in CentOS syslog, no messages sending to FC9 when I checked with tcpdump on port 514 on FC9.
Has anyone made CentOS 5 syslog work to send messages to remote syslog server? Or, I am wondering if it has never worked on CentOS 5?
Thanks Dag and all responses.
Kind regards,
jupiter
hce wrote:
The rsyslog.conf in FC 9 is much easy to be configured, just enable the InputTCPServerRun and ModLoad. It is not the problem in FC 9 rsyslog server, it is the problem in CentOS syslog, no messages sending to FC9 when I checked with tcpdump on port 514 on FC9.
Has anyone made CentOS 5 syslog work to send messages to remote syslog server? Or, I am wondering if it has never worked on CentOS 5?
syslog or rsyslog?
Have you "tcpdumped" udp or tcp?
Ralph
On Fri, May 22, 2009 at 7:07 PM, Ralph Angenendt ra+centos@br-online.de wrote:
hce wrote:
The rsyslog.conf in FC 9 is much easy to be configured, just enable the InputTCPServerRun and ModLoad. It is not the problem in FC 9 rsyslog server, it is the problem in CentOS syslog, no messages sending to FC9 when I checked with tcpdump on port 514 on FC9.
Has anyone made CentOS 5 syslog work to send messages to remote syslog server? Or, I am wondering if it has never worked on CentOS 5?
syslog or rsyslog?
Is the CentOS 5 running only for syslog? In my case, the remote server is running rsyslog, but that the CentOS syslog should be able to talk to RH9 rsyslog, right?
Have you "tcpdumped" udp or tcp?
Tried both. Nothing coming from the CentOS messages on port 514.
Thank you.
Kind Regards.
jupiter
One thing which I have not seen discussed yet -- the syslog.conf seems to work much better when you use tabs, not spaces, in it.
So in your case it would be
*.info;mail.none;authpriv.none;cron.none[tab][tab][tab]@192.168.1.5
Don't know if rsyslog.conf has the same requirement.
hce wrote:
Is the CentOS 5 running only for syslog? In my case, the remote server is running rsyslog, but that the CentOS syslog should be able to talk to RH9 rsyslog, right?
Yes, but standard syslog does not support the @@hostname directive for tcp logging, only @hostname for udp logging.
Ralph
Hi, my logging server needs a touch <filename> if I define a new logfile. Helmut
-----Ursprüngliche Nachricht----- Von: centos-bounces@centos.org [mailto:centos-bounces@centos.org] Im Auftrag von hce Gesendet: Donnerstag, 21. Mai 2009 05:25 An: CentOS mailing list Betreff: [CentOS] Send syslog to a remote server
Hi,
I am running CentOS 5 and I tried to config flowing statement in syslog.conf to send syslog messages to a remote server running on FC 9, but it did not work. There was nothing send to the FC9.
"*.info;mail.none;authpriv.none;cron.none @@192.168.1.5"
Could anyone advice whether the syslog in CentOS 5 does not support remote server, or I could be missing something?
System:
DISTRO_NAME=centos DISTRO_VERSION=5 DISTRO_CODENAME=final DISTRO_PATCHLEVEL=5 DISTRO_ARCH=x86_64 DISTRO_KERNEL=2.6.18_53.el5
Thank you.
Kind Regards,
jupiter _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
-
Dag Wieers -
David.Mackintosh＠xdroop.com -
hce -
Helmut Drodofsky -
nate -
Ralph Angenendt -
shyam hirurkar