SUMMARY: multiple loghosts

From: Timothy Arnold <tim_at_ngfl.gov.uk>
Date: Wed Dec 03 2003 - 04:57:45 EST
With thanks to Gabriel Rosenkoetter for the solution.

Tim.

On 2 Dec 2003, at 15:14, gabriel rosenkoetter wrote:

> On Fri, Nov 28, 2003 at 02:57:56PM +0000, Timothy Arnold wrote:
>> I have edited /etc/hosts and added 'loghost' entry for each HP 
>> openview
>> server.
>
> Why?
>
>> I have also edited /etc/syslog.conf and added:
>>
>> *.err;kern.debug;daemon.notice;mail.crit        ifdef(`LOGHOST',
>> /var/adm/messages, @loghost)
>>
>> It appears in the first entry for loghost but not for any of the 
>> others
>> and does not write it to local ./var/adm/messages. Any ideas?
>
> It's doing exactly what you told it to do.
>
> If you want syslog to send messages to hosts other than the first IP
> address returned when you do a name lookup on loghost, you'll need
> to actually list the names of those hosts after the @ in
> /etc/syslog.conf.
>
> LOGHOST is only defined if the IP address for loghost matches the IP
> address for the host running syslogd, as clearly indicated in
> syslog.conf(4).
>
> Putting more than one loghost entry in /etc/resolv.conf probably
> means that you're only passing logs to the last one mentioned.
> (Either that or the first one, not sure how Solaris's resolver
> library would choose to deal with that situation.)
>
> I'd drop any reliance on the loghost hostname completely, if I were
> you. Just do this:
>
> *.err;kern.debug;daemon.notice;mail.crit	@loghost01
> *.err;kern.debug;daemon.notice;mail.crit	@loghost02
> *.err;kern.debug;daemon.notice;mail.crit	/var/adm/messages
>
> -- 
> gabriel rosenkoetter
> gr@eclipsed.net
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
Received on Wed Dec 3 05:03:05 2003

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:43:24 EST