Comments on: Logging to a centralized loghost from Router or other hosts http://www.cyberciti.biz/tips/log-all-logs-to-central-linux-unix-loghost.html This is a Linux sys admin journal by Vivek about sys admin work, Linux tips & tricks, hacks, news and more. Fri, 10 Feb 2012 20:37:43 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Alan Beardhttp://www.cyberciti.biz/tips/log-all-logs-to-central-linux-unix-loghost.html#comment-179097 Alan Beard Fri, 10 Feb 2012 06:03:01 +0000 http://www.cyberciti.biz/tips/logging-to-a-centralized-loghost-from-router-or-other-hosts.html#comment-179097 Please document how to, in syslog.conf, direct syslog messages from different hosts, eg. routers, to separate files. Please document how to, in syslog.conf, direct syslog messages from different hosts, eg. routers, to separate files.

]]> By: Yogeshhttp://www.cyberciti.biz/tips/log-all-logs-to-central-linux-unix-loghost.html#comment-156697 Yogesh Fri, 18 Jun 2010 10:08:32 +0000 http://www.cyberciti.biz/tips/logging-to-a-centralized-loghost-from-router-or-other-hosts.html#comment-156697 Gr8 !! You know why I like your HowTo's ? Coz you explain necessary theory before actually start running the commands. U Rock Vivek :-) Gr8 !!
You know why I like your HowTo’s ?
Coz you explain necessary theory before actually start running the commands.
U Rock Vivek :-)

]]> By: Linux Hosthttp://www.cyberciti.biz/tips/log-all-logs-to-central-linux-unix-loghost.html#comment-155835 Linux Host Thu, 06 May 2010 14:33:06 +0000 http://www.cyberciti.biz/tips/logging-to-a-centralized-loghost-from-router-or-other-hosts.html#comment-155835 Hey, Thanks for the detailed post on central logging. I am sure this will be a great resource for sys-admins, uhhh, fro proactive-sys-admins. Hey,

Thanks for the detailed post on central logging. I am sure this will be a great resource for sys-admins, uhhh, fro proactive-sys-admins.

]]> By: Michael Bartohttp://www.cyberciti.biz/tips/log-all-logs-to-central-linux-unix-loghost.html#comment-150601 Michael Barto Thu, 10 Sep 2009 21:54:55 +0000 http://www.cyberciti.biz/tips/logging-to-a-centralized-loghost-from-router-or-other-hosts.html#comment-150601 I am trying to configure a Netgear FVX536 log forwarding to a CentosOS server. The Netgear is configured and shows me logs it is sending. But I get nothing. With Centos 5.2 in /etc/sysconfig/syslog, I added the line "SYSLOGD="-r" and restarted the syslog service (e.g. service syslog restart). Here is the /etc/sysconfig/syslog file changes: -------------------------------------------------------------------------- # Options to syslogd # -m 0 disables 'MARK' messages. # -r enables logging from remote machines # -x disables DNS lookups on messages recieved with -r # See syslogd(8) for more details SYSLOGD_OPTIONS="-m 0" SYSLOGD="-r" # Options to klogd # -2 prints all kernel oops messages twice; once for klogd to decode, and # once for processing with 'ksymoops' # -x disables all klogd processing of oops messages entirely # See klogd(8) for more details KLOGD_OPTIONS="-x" # SYSLOG_UMASK=077 # set this to a umask value to use for all log files as in umask(1). # By default, all permissions are removed for "group" and "other". -------------------------------------------------------------------------------- These are the logs I am NOT getting: ----------------------------------------------------------------------------- 2009 Sep 10 13:54:50 [FVX538] [login] Value TTTTT at change lloginTimeoutGet and value is LOCALDOMAIN_ 2009 Sep 10 13:54:50 [FVX538] [login] At line 2527 TTTT at func lloginLogout_ 2009 Sep 10 13:54:50 [FVX538] [login] Logout succeeded for user admin 2009 Sep 10 13:54:50 [FVX538] [login] Deleting all cookie files with privielge 0 2009 Sep 10 13:54:52 [FVX538] [login] Value TTTTT at change lloginTimeoutGet and value is LOCALDOMAIN_ - Last output repeated twice - 2009 Sep 10 13:54:52 [FVX538] [login] Deleting all cookie files with privielge 0 2009 Sep 10 13:54:52 [FVX538] [login] Login succeeded: user admin from 192.168.1.199 2009 Sep 10 13:54:52 [FVX538] [login] Login succeeded for user admin from 192.168.1.199 2009 Sep 10 14:23:56 [FVX538] [login] Value TTTTT at change lloginTimeoutGet and value is LOCALDOMAIN_ 2009 Sep 10 14:23:56 [FVX538] [login] At line 2527 TTTT at func lloginLogout_ 2009 Sep 10 14:23:56 [FVX538] [login] Logout succeeded for user admin 2009 Sep 10 14:23:56 [FVX538] [login] Deleting all cookie files with privielge 0 2009 Sep 10 14:23:57 [FVX538] [login] Value TTTTT at change lloginTimeoutGet and value is LOCALDOMAIN_ - Last output repeated twice - 2009 Sep 10 14:23:58 [FVX538] [login] Deleting all cookie files with privielge 0 2009 Sep 10 14:23:58 [FVX538] [login] Login succeeded: user admin from 192.168.1.199 2009 Sep 10 14:23:58 [FVX538] [login] Login succeeded for user admin from 192.168.1.199 I am trying to configure a Netgear FVX536 log forwarding to a CentosOS server. The Netgear is configured and shows me logs it is sending. But I get nothing. With Centos 5.2 in /etc/sysconfig/syslog, I added the line “SYSLOGD=”-r” and restarted the syslog service (e.g. service syslog restart). Here is the /etc/sysconfig/syslog file changes:
————————————————————————–
# Options to syslogd
# -m 0 disables ‘MARK’ messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages recieved with -r
# See syslogd(8) for more details
SYSLOGD_OPTIONS=”-m 0″
SYSLOGD=”-r”
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
# once for processing with ‘ksymoops’
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS=”-x”
#
SYSLOG_UMASK=077
# set this to a umask value to use for all log files as in umask(1).
# By default, all permissions are removed for “group” and “other”.
——————————————————————————–

These are the logs I am NOT getting:
—————————————————————————–
2009 Sep 10 13:54:50 [FVX538] [login] Value TTTTT at change lloginTimeoutGet and value is LOCALDOMAIN_
2009 Sep 10 13:54:50 [FVX538] [login] At line 2527 TTTT at func lloginLogout_
2009 Sep 10 13:54:50 [FVX538] [login] Logout succeeded for user admin
2009 Sep 10 13:54:50 [FVX538] [login] Deleting all cookie files with privielge 0
2009 Sep 10 13:54:52 [FVX538] [login] Value TTTTT at change lloginTimeoutGet and value is LOCALDOMAIN_
– Last output repeated twice -
2009 Sep 10 13:54:52 [FVX538] [login] Deleting all cookie files with privielge 0
2009 Sep 10 13:54:52 [FVX538] [login] Login succeeded: user admin from 192.168.1.199
2009 Sep 10 13:54:52 [FVX538] [login] Login succeeded for user admin from 192.168.1.199
2009 Sep 10 14:23:56 [FVX538] [login] Value TTTTT at change lloginTimeoutGet and value is LOCALDOMAIN_
2009 Sep 10 14:23:56 [FVX538] [login] At line 2527 TTTT at func lloginLogout_
2009 Sep 10 14:23:56 [FVX538] [login] Logout succeeded for user admin
2009 Sep 10 14:23:56 [FVX538] [login] Deleting all cookie files with privielge 0
2009 Sep 10 14:23:57 [FVX538] [login] Value TTTTT at change lloginTimeoutGet and value is LOCALDOMAIN_
– Last output repeated twice -
2009 Sep 10 14:23:58 [FVX538] [login] Deleting all cookie files with privielge 0
2009 Sep 10 14:23:58 [FVX538] [login] Login succeeded: user admin from 192.168.1.199
2009 Sep 10 14:23:58 [FVX538] [login] Login succeeded for user admin from 192.168.1.199

]]>