Distributed Systems Administration Utilities User's Guide, Linux, March 2009

3.4 Disabling Log Consolidation
The clog_wizard enables log consolidation configurations but does not have an unconfigure
or deconfigure option. Thus you must disable a system from participating in log consolidation
manually, using the following instructions for each system type to:
• Disable a standalone log consolidation system
• Disable a Serviceguard cluster log consolidation system
• Disable a standalone log forwarding client
• Disable a Serviceguard log forwarding client
3.4.1 Disabling a Standalone Log Consolidation System
Perform the following steps to disable log consolidation:
1. Stop syslog-ng:
# /etc/init.d/syslog-ng stop
2. Edit the /etc/sysconfig/syslog-ng file, as follows:
a. Change the CLOG_CONFIGURED line to CLOG_CONFIGURED=0.
b. Remove all other CLOG lines except for the following:
CLOG_LAYOUTS_DIR=/var/opt/dsau/layouts
CLOG_ADDITIONAL_LOG_DIRS[0]=/var/log
3. If the TCP protocol was used, remove the following line from /etc/services:
clog_tcp <port>/tcp # Consolidated logging with syslog-ng
3.4.2 Disabling a Serviceguard Cluster Log Consolidation System
Perform the following steps to disable log consolidation in a Serviceguard cluster. Perform these
steps on each cluster member:
1. Halt the clog package with the command:
# . /etc/cmcluster.conf
# $SGSBIN/cmhaltpkg clog
2. Stop syslog-ng with the following command:
# /etc/init.d/syslog-ng stop
(This stops the syslog-ng daemon and package log consolidation if configured.)
3. Edit the /etc/sysconfig/syslog-ng file and change the CLOG_CONFIGURED line to
the following:
CLOG_CONFIGURED=0
Remove all other CLOG lines except for:
CLOG_LAYOUTS_DIR=/var/opt/dsau/layouts
CLOG_ADDITIONAL_LOG_DIRS[0]=/var/log
4. Delete the clog package with the following command:
# cmdeleteconf -p clog
3.4.3 Disabling a Standalone Log Forwarding Client
Perform the following steps to disable log forwarding on a standalone client:
1. Stop syslog-ng with the following command:
# /etc/init.d/syslog-ng stop
This stops the syslog-ng daemon and also ssh port forwarding if configured.
3.4 Disabling Log Consolidation 77