[syslog-ng] AIX: Syslog NG 1.6.9 (tcp) send logmessages to central log server

Jochen Kirn jochen.kirn at gmail.com
Mon Mar 6 15:24:08 CET 2006


Hi all,

logmessages are being written to the AIX default syslog daemon which
forwards certain messages to syslog ng via a named pipe
"/var/adm/syslog.pipe"

The log messages are being written to the destination "localfile" but not to
the remote syslog ng logging server. Any idea what's going wrong here ?
the exact same "syslog-ng.conf" works with a HP-UX or Solaris based Syslog
NG Installation without any problem.


Setup:

Syslog NG: 1.6.9 with libol 0.3.17
System: AIX 5.1 ML8  and AIX 5.3 ML 3

central logging server is a linux based syslog NG 1.6.9 which can
successfully receive log messages from other (non aix) hosts.

syslog-ng.conf:

##############
# Log sources
#
source src {
pipe ("/var/adm/syslog.pipe");
};

##############
# filters
#
filter f_sshd   {program("sshd"); };

##############
# Log destinations
destination mylogserver{ tcp("logserver" port(514)); };
destination localfile{ file("/var/tmp/messages" template("$YEAR.$MONTH.$DAY
$HOUR:$MIN:$SEC $HOST $MSG\n") template-escape(yes
)); };

##############
# Perform the logging
log { source(src); filter(f_sshd); destination(mylogserver); };

log { source(src); filter(f_sshd); destination(localfile); };


regards
Jochen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20060306/463e0940/attachment.html


More information about the syslog-ng mailing list