Linux logging server

Hello.

I'm going to implement a logging server on some Mandriva machines.
Do you know of a good tutorial?

What happens if the logging server goes down?

Thanks,
Jacob

On 2005-10-11, (E-Mail Removed) <(E-Mail Removed)> wrote:
>
> I'm going to implement a logging server on some Mandriva machines.
> Do you know of a good tutorial?

Did you check out the docs for your particular syslog implementation?
What you're describing isn't all that difficult.

> What happens if the logging server goes down?

It doesn't log anything. If you have local logging configured as
well, messages will be logged locally in addition to the (failing)
remote logging. Remote logging will not catch up when the remote syslog
server comes back, so you need to check the local logs yourself or
configure N>1 remote syslog machines.

--keith

--
kkeller-(E-Mail Removed)
(try just my userid to email me)
AOLSFAQ=http://wombat.san-francisco.ca.us/cgi-bin/fom
see X- headers for PGP signature information

(E-Mail Removed) wrote:
> I'm going to implement a logging server on some Mandriva machines.
> Do you know of a good tutorial?
The man page on syslog is a good start. If you use
syslog be sure to enable network input. The file to
examine/modify is probably /etc/sysconfig/syslog.
Use the -r option.

> What happens if the logging server goes down?
Have two logging servers. Say your two servers
are at 192.168.1.10 and 192.168.1.11 (host names
work too).

Add the following two lines to /etc/syslog.conf on
each client PC:
*.* @192.168.1.10
*.* @192.168.1.11

This copies ALL log messages to the two log servers.
Look at the syslog.conf man page if you want just a
subset.

Popular alternatives to syslog include nsyslog, evlog,
minisyslogd, syslog-ng. Their respective web sites
may have some tutorial material on remote logging.


BTW: I have written my own logger, logmuxd, that fills a
need not met by any of the above. It listens for incoming
TCP connections and sends filtered log messages down all
accepted connections. This capability is needed for a
simple alarm system that I'm building.

Bob Smith