Virtual TapeServer 6.04.04 for NonStop Servers Operations and Administration Guide

118 | Troubleshooting
3. Edit /etc/syslog.conf and add a line for the remote host. The following line is an example
that logs kernel messages.
kern.* @remote.log.host.domain.com
where kern.* specifies to log all kernel messages and remote.log.host.domain.com
specifies the hostname or IP address of the remote host that will log messages for the
target host. To log other messages, refer to the auditd, syslogd, and syslog.conf man
pages.
4. Run the following commands:
chkconfig auditd off
service auditd stop
service syslog restart
These commands stop local logging through the auditd process and force audit records to
be logged through syslog. The syslog facility will send log messages to the remote system.
Note that audit log messages will also be listed in /var/log/kern_messages.
5. Log out of the VTS server.
6. If necessary, enable the remote system to receive the log messages.
The following steps describes how to configure syslog on a remote Linux server.
a. On the target (remote) system, log in.
b. Become root:
su -
c. Add the -r parameter to the command line for the syslog daemon. This can be done by
modifying the /etc/sysconf/syslog file and setting the SYSLOGD_OPTIONS
variable.
Here is an example of a default /etc/sysconf/syslog file:
# Options to syslogd
# -m 0 disables 'MARK' messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages received with -r
# See syslogd(8) for more details
SYSLOGD_OPTIONS="-m 1"
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to
# decode, and once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS="-x"
To enable the system to receive remote syslog messages, change this line:
SYSLOGD_OPTIONS="-m 1"
to this:
SYSLOGD_OPTIONS="-m 1 -r"
d. Restart the syslog daemon by entering this command:
service syslog restart