4.The syslog-ngstartup procedure, /sbin/init.d/syslog-ng, relies on several configuration variables. Edit /etc/rc.config.d/syslog-ngas follows:

a.Change the CLOG_CONFIGURED line to:

CLOG_CONFIGURED=1

b.Add the following lines:

CLOG_CONSOLIDATOR=1

If using the TCP protocol, add:

CLOG_TCP=1

CLOG_TCP_PORT=tcp port chosen for log consolidation otherwise, if using the UDP protocol, add:

CLOG_TCP=0

If consolidating the local syslogs, add:

CLOG_SYSLOG=1 otherwise, add:

CLOG_SYSLOG=0

If consolidating package logs of this cluster, add:

CLOG_PACKAGE=1 otherwise

CLOG_PACKAGE=0

c.Add the following two values which are used by the System and Consolidated Log Viewer:

CLOG_LAYOUTS_DIR=/var/opt/dsau/layouts CLOG_ADDITIONAL_LOG_DIRS[0]=/var/adm/syslog

5.All the files edited thus far need to be distributed cluster-wide:

# ccp /etc/syslog-ng.conf.server /etc/

# ccp /etc/syslog-ng.conf.client /etc/

# ccp /etc/rc.config.d/syslog-ng /etc/rc.config.d/

6.When using TCP, record the port number you chose above in the /etc/services file. For example, add the line:

clog_tcp 1776/tcp

# Consolidated logging with syslog-ng

Add this line to /etc/services for each member of the cluster.

3.3.2.2.1 Creating the clog Package

To create the consolidated logging or clog package, start by copying the package templates:

#mkdir /etc/cmcluster/clog

#cd /etc/cmcluster/clog

#cp /opt/dsau/share/serviceguard/templates/clog.conf.template clog.conf

#cp /opt/dsau/share/serviceguard/templates/clog.script.template clog

#chmod +x clog

Both the clog.conf package configuration file and the clog package control script need to be edited to replace marker tokens with the correct values.

For clog.conf, there is only one token to replace, <%SG_PKG_SUBNET%>. This identifies the package’s subnet. It is the same as the subnet value in the package control script. Use netstat -ito help identify the proper subnet for the package’s IP address.

For the package control script, clog, make the changes described below.

The default script template assumes you are using an LVM-based storage configuration. Replace the volume group/filesystem related tokens as appropriate for the package’s storage configuration as follows:

3.3 Log Consolidation Configuration

63