Fwd: [syslog-ng]Logging Remotely from Solaris to Linux

Balazs Scheidler bazsi@balabit.hu
Wed, 29 May 2002 13:47:50 +0200


On Tue, May 28, 2002 at 11:44:22AM -0500, Ron Braley wrote:
> Hi bazsi
> 
> Yes, I'm running syslog-ng on both platforms.
> 
> I've attached the configuration files from the Linux box used to record
> logs, and from the Solaris box sending logs.  I hope this helps.
> 
> Please keep in mind that I've only configured cron to send to the
> source s_tcp destination for testing.  I've used the logger command
> "logger -p cron.crit TEST FROM JUB" to test things.  Also, I'm new to
> syslogging (as I'm sure you can tell).
> 
> Thanks again, and have a great day!

Are you sure that the facility code for cron matches on Solaris and Linux?

Try to create a bare bone configuration like:

(solaris)

source s_all { internal(); sun-streams("/dev/log" door("/etc/.syslog_door"); };
destination d_tcp { tcp("1.2.3.4"); };
log { source(s_all); destination(d_tcp); };

(linux)

source s_all { internal(); unix-stream("/dev/log"); tcp(); };
destination d_messages { file("/var/log/messages"); };
log { source(s_all); destination(d_messages); };

And as soon as it works, try playing with filters and the rest.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1