I'm using a linux to receive my logs for this explanation.
LogServer:
usually the syslog conf path for syslog on linux is /etc/sysconfig/syslog (red hat for example)
Setup the syslog on linux with the bellow options:
SYSLOGD_OPTIONS="-m 0 -r"
*.* /var/adm/messages
Refresh the syslog
# kill -HUP syslogPid
HP-UX :
Setup the syslog on HP-UX with the bellow options:
syslog conf path: /etc/syslog.conf
*.debug @LogServer
Get the syslog pid to refresh the process:
ps -ef | grep syslog
# kill -HUP syslogPid
Forwarding the syslog to another server on network
quinta-feira, 25 de outubro de 2012
Labels: Security