Configuring Sun Solaris syslog.conf to forward events to TIBCO LogLogic LMI
Article ID: KB0077210
Updated On:
| Products | Versions |
|---|---|
| TIBCO LogLogic Log Management Intelligence | all versions |
Description
When configuring a Sun Solaris box to send syslog to a LogLogic LMI appliance the only change required is to modify the syslog.conf file. The simple procedure below explains what changes are required.
Issue/Introduction
This article shows how to configure a Solaris syslog.conf file for integrating with LogLogic LMI.
Resolution
To send all syslog data from a Solaris host to the loghost, add the following line to /etc/syslog.conf:
Note: Remember to use tabs and not spaces
*.debug <tab><tab> @<loglogic-IP-address>
Example:
*.debug <tab><tab> @10.5.1.130
Then restart syslog:
$ /etc/init.d/syslog stop ; /etc/init.d/syslog start
To verify that your syslog configuration is correct, use the UNIX utility logger to write arbitrary messages. The -p flag allows you to set the facility and level. Typing the following command:
$ /usr/bin/logger -p local0.warning "This space intentionally left blank"
will cause the message "This space intentionally left blank" to be sent to the local system's syslog.
$ /usr/bin/logger -p loglogic-IP-Address "This space intentionally left blank"
will cause the message "This space intentionally left blank" to be sent to the LMI's appliance syslog.
Note: Remember to use tabs and not spaces
*.debug <tab><tab> @<loglogic-IP-address>
Example:
*.debug <tab><tab> @10.5.1.130
Then restart syslog:
$ /etc/init.d/syslog stop ; /etc/init.d/syslog start
To verify that your syslog configuration is correct, use the UNIX utility logger to write arbitrary messages. The -p flag allows you to set the facility and level. Typing the following command:
$ /usr/bin/logger -p local0.warning "This space intentionally left blank"
will cause the message "This space intentionally left blank" to be sent to the local system's syslog.
$ /usr/bin/logger -p loglogic-IP-Address "This space intentionally left blank"
will cause the message "This space intentionally left blank" to be sent to the LMI's appliance syslog.
Feedback
Yes
No
Powered by
