Virtual TapeServer 8.4 Configuration Guide

198 | Virtual TapeServer Configuration Guide
4. Run the following commands:
chkconfig auditd off
service auditd stop
service syslog restart
These commands stop local logging through the auditd process and force audit records to be
logged through syslog. The syslog facility will send log messages to the remote system. Note
that audit log messages will also be listed in /var/log/kern_messages.
5. Log out of the VTS server.
6. If necessary, enable the remote system to receive the log messages.
The following steps describes how to configure syslog on a remote Linux server.
a. On the target (remote) system, log in.
b. Become root:
su -
c. Add the -r parameter to the command line for the syslog daemon. This can be done by
modifying the /etc/sysconf/syslog file and setting the SYSLOGD_OPTIONS variable.
Here is an example of a default /etc/sysconf/syslog file:
# Options to syslogd
# -m 0 disables 'MARK' messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages received with -r
# See syslogd(8) for more details
SYSLOGD_OPTIONS="-m 1"
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to
# decode, and once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS="-x"
To enable the system to receive remote syslog messages, change this line:
SYSLOGD_OPTIONS="-m 1"
to this:
SYSLOGD_OPTIONS="-m 1 -r"