HP UX System Adstration manual Log Consolidation Configuration

1.Run /opt/dsau/sbin/syslog-ng with the -s or --syntax-only option to verify the syntax of the /etc/syslog-ng.conf file. This should be a symbolic link to /etc/ syslog-ng.conf.server as described previously.

2.Start syslog-ng using /sbin/init.d/syslog-ng start.

3.If consolidating the local syslogs, use logger test-messageand make sure this message is in the consolidated syslog.log. If you are not consolidating the local logs, use the logger command from a log forwarding client. Note that the logger messages are first sent to the local syslog which forwards them to syslog-ng. syslogd by default suppresses duplicate messages. If you issue multiple logger test messages, make sure each is unique.

3.3.2.2Manually Configuring a Serviceguard Cluster as a Log Consolidation Server

Configuring a Serviceguard cluster as a log consolidation server is similar to the steps for a single system. All cluster members must be up and accessible before proceeding.

Create the configuration files described below on every cluster member. The simplest approach is to configure one member completely and then copy each configuration file cluster-wide. The cexec and ccp tools can simplify replicating changes cluster-wide.

For a cluster configuration, syslog-ngis configured as a package so the log consolidation service is highly available. The package must be named clog and the package configuration files require the following information:

•Registered IP address and DNS name for the clog package

•The subnet associated with that IP address

•Cluster-wide storage configuration using LVM or VxVM

•A filesystem configured on the cluster-wide storage, that can be VxFS or CFS. Since consolidated logs grow rapidly, HP recommends that the filesystem be configured using the largefiles option and that there is room for growth.

Complete IP address registration and storage/filesystem configuration before continuing. For additional information on creating the Serviceguard storage/filesystem configuration for a package, refer to the Managing Serviceguard manual.

For an overview of how to configure consolidated logging in a cluster, see the section “Cluster Configuration Notes for clog” (page 52).

3.3 Log Consolidation Configuration 59