I have recently started using syslog-ng so that I can use stunnel to log to a central loghost.  I have gotten syslog-ng working on a linux box, and everything works fine, but my HP-UX boxes won’t even log locally, much less log to a loghost.  Below, I have included the syslog-ng.conf for one of the hosts.

 

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Stephen Tanner

HP-UX Systems Administrator

Network Support Services

Lee County Clerk of Courts

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 

options { use_fqdn(no); keep_hostname(no); use_dns(no); long_hostnames(off); sync(3); log_fifo_size(300); };

 

#

# This is the default behavior of sysklogd package

# Logs may come from unix stream, but not from another machine.

#

source src { unix-dgram("/dev/log.un"); internal(); };

 

# After that set destinations.

 

# First some standard logfile

#

destination lpr { file("/var/adm/lpr.log"); };

destination mail { file("/var/adm/mail.log"); };

 

# Some `catch-all' logfiles.

#

destination syslog { file("/var/adm/syslog/syslog.log"); };

 

# The root's console.

#

destination console { usertty("root"); };

 

# Virtual console.

#

destination console_all { file("/dev/tty8"); };

 

# Here's come the filter options. With this rules, we can set which

# message go where.

 

filter f_lpr { facility(lpr); };

filter f_mail { facility(mail); };

filter f_messages { level(info .. warn)and not facility(auth, cron, daemon, mail, news); };

filter f_emergency { level(emerg); };

 

###############################################################

 

log { source(src); filter(f_lpr); destination(lpr); };

log { source(src); filter(f_mail); destination(mail); };

log { source(src); filter(f_messages); destination(syslog); };

log { source(src); filter(f_emergency); destination(console); };

#log { source(src); destination(messages); };

 

###############################################################

## set up logging to a loghost forwarded from localhost via stunnel

destination loghost {tcp("127.0.0.1" port(514));};

 

# send everything to loghost, too

log { source(src); destination(loghost); };

###############################################################