Re: [TCLUG:11843] Remote Syslog

[Nate Carlson <natecars@infiniteloop.com>]

On Sun, 2 Jan 2000, Jonathan Kline wrote:

>     Earlier, last year, I posted a thread about security and some1 suggested
> using remote syslog.  Does anyone know how someone would go about using
> remote syslog?  I do have a another server in which I could place Logs.

Man syslogd. Basically, it boils down to enabling remote syslog reception
on the machine you want to receive the logs, and configuring the machine
you want to send the logs for remote logging. An example for the client
machine would be the following line in /etc/syslog.conf:

*.debug						@loghost

...which will send all log messages of the 'debug' priority to the machine
with the hostname loghost.

(Hint - the command line parameter to enable remote syslog reception is
'-r'. add it to the necessary script on your loghost.)

---
nate carlson
the infinite loop
natecars@infiniteloop.com