1. Steps for Configuring the Separate Log Server
Express5800/R320g-E4, R320g-M4 Installation Guide (VMware)
78
Chapter 3 Configuring the Separate Log Server
1.2
Setting Syslog for Log Server
Set the 514/udp port in waiting state on the log server side. Additionally, the configuration to output transferred
logs to /var/log/messages needs to be set as well.
Examples of setting an environment to use syslog
1. To set the 514/udp port in waiting state, edit /etc/sysconfig/syslog.
<Before the change>
SYSLOGD_OPTIONS=”-m 0”
<After the change>
SYSLOGD_OPTIONS=”-m 0 -r”
2. To output transferred logs to /var/log/messages, edit /etc/syslog.conf.
<Before the change>
*.info;mail.none;authpriv.none;cron.none /var/log/messages
<After the change>
*.info;mail.none;authpriv.none;cron.none;local4.none;local6.notice /var/log/messages
3. Restart syslog.
# service syslog restart
Examples of setting an environment to use rsyslog
1. To set the 514/udp port in waiting state, edit /etc/sysconfig/rsyslog.
<Before the change>
# Provides UDP syslog reception
#$ModLoad imudp.so
#$UDPServerRun 514
<After the change>
# Provides UDP syslog reception
$ModLoad imudp.so
$UDPServerRun 514
2. To output transferred logs to /var/log/messages, edit /etc/rsyslog.conf.
<Before the change>
*.info;mail.none;authpriv.none;cron.none /var/log/messages
<After the change>
*.info;mail.none;authpriv.none;cron.none;local4.none;local6.notice /var/log/messages
3. Restart rsyslog.
# service rsyslog restart
Note
The setting method may be changed depending on the package version. For the setting
method, refer to Help, etc. for .conf files. For example, Help for rsyslog.conf can be checked
by running the man command as below.
# man rsyslog.conf
