HP UX System Adstration manual # cpp /etc/rc.config.d/syslogd /etc/rc.config.d

1.If you want the syslog messages for the cluster to be forwarded to the log consolidator, do the following:

a.Start by configuring the standard syslogd to co-exist with a syslog-ngforwarder. By default, syslogd listens for incoming log messages on UDP port 514. To forward this cluster’s syslogs, syslog-ngmust listen on UDP port 514. Edit

/etc/rc.config.d/syslogd and change SYSLOGD_OPTS to add the-N switch; this prevents syslogd from listening on port 514. For example,

SYSLOGD_OPTS=“-D -N”

b.Edit the system’s /etc/syslog.conf file to forward log messages to port 514 on the local host where they will be read by syslog-ng. Using the HP-UX default /etc/syslog.conf as the example, add the following lines:

mail.debug	@fully	qualified	hostname
*.info;mail.none	@fully	qualified	hostname

where fully qualified hostname is the fully qualified hostname of this cluster member. This name must be fully qualified or syslogd will not forward the messages properly.

If you have customized syslog.conf, make sure to add the forwarding lines for your customizations as well.

c.Stop and restart syslogd as follows for these changes to take effect:

#/sbin/init.d/syslogd stop

#/sbin/init.d/syslogd start

d.Since /etc/rc.config.d/syslogd is generic, it can be distributed cluster-wide using ccp:

#cpp /etc/rc.config.d/syslogd /etc/rc.config.d/

e.The /etc/syslog.conf is specific to each member and the edits described above must be performed on each cluster member.

f.Making the above changes on each cluster member, syslogd must be restarted for these changes to take effect. Use cexec to do this on all members of the cluster:

#cexec “/sbin/init.d/syslogd stop;/sbin/init.d/syslogd start”

3.3 Log Consolidation Configuration 69