[News]

News:

[kannan.ekanath]

kannan.ekanath

kannan.ekanath

Show kannan.ekanath's last posts.

Show general stats for kannan.ekanath.

• 
• Newbie
• Posts: 3

My logs are not getting through over to my network. Here is what I did,

Box1 - Added the two lines on /etc/syslog.conf
local6.*                                                @Box2
local6.*                                                /var/log/messages
*.debug                                                @Box2
*.debug                                                /var/log/messages

which means I redirect all debug messages and local6 facility messages to box2

Box2 - Added the line on /etc/syslog.conf
*.debug                                                /var/log/messages
local6.*                                               /var/log/messages

Now, my application sits on Box1 and the SyslogAppender (Java based log4j appender) writes to local6.err I would have expected it come over till Box2. That did not happen.

1) I went into Box1 and did a "kill -1 PID" (since this would send a debug message saying restarted teh service). This message came in Box1 as well as Box2
2) Only the log messages from the SyslogAppender is not coming through. I have no idea why, but when I examined Box1 I found the two lines,
Sep 25 15:08:43 hamdev114 syslogd 1.4.1: restart (remote reception)
Sep 25 15:11:06 localhost.localdomain BETEX Some error

The only difference between the two logs (first came through the network and the second did not) was that the debug log was sending the hostnaem as hamdev114 and the log4j appender sent it as localhost.localdomain. Could this be the problem?

[kannan.ekanath]

kannan.ekanath

kannan.ekanath

Show kannan.ekanath's last posts.

Show general stats for kannan.ekanath.

• 
• Newbie
• Posts: 3

I tried a simple
logger -p local6.err "some message"

and that reflected on Box1 and Box2

[mutex]

mutex

mutex

Show mutex's last posts.

Show general stats for mutex.

• 
• Administrator
• Newbie
• Posts: 782

Are you seeing logs on Box1 from syslogappender?  in /var/log/messages?

[kannan.ekanath]

kannan.ekanath

kannan.ekanath

Show kannan.ekanath's last posts.

Show general stats for kannan.ekanath.

• 
• Newbie
• Posts: 3

Yes I am seeing the message from Box1 /var/log/messages.

Also I wrote a Java program to send like 30 messages at a shot to Box1 (and hoped it will be copied onto Box2). In box1 I got
Sep..xx [IP from Java pgm was run] My Messagehere
Sep..xx syslogd The last message was repeated 29 times [which is fine, since I sent the same message 29 times]

I noticed one thing interesting in Box2. It did not get line 1 "My Messagehere". But it had the line
Sep..xx [Box1 IP] the last message was repeated 29 times.

So, the second line which was generated by a Box1 process was able to make it thru the network (and so did a simple logger command from Box1). It is only the Java Application that this syslog in Box1 cant make out.

FYI, I just run the syslogd with -m 0 -r option and I dont do any IP lockdown based on host names ....