With thanks to Gabriel Rosenkoetter for the solution. Tim. On 2 Dec 2003, at 15:14, gabriel rosenkoetter wrote: > On Fri, Nov 28, 2003 at 02:57:56PM +0000, Timothy Arnold wrote: >> I have edited /etc/hosts and added 'loghost' entry for each HP >> openview >> server. > > Why? > >> I have also edited /etc/syslog.conf and added: >> >> *.err;kern.debug;daemon.notice;mail.crit ifdef(`LOGHOST', >> /var/adm/messages, @loghost) >> >> It appears in the first entry for loghost but not for any of the >> others >> and does not write it to local ./var/adm/messages. Any ideas? > > It's doing exactly what you told it to do. > > If you want syslog to send messages to hosts other than the first IP > address returned when you do a name lookup on loghost, you'll need > to actually list the names of those hosts after the @ in > /etc/syslog.conf. > > LOGHOST is only defined if the IP address for loghost matches the IP > address for the host running syslogd, as clearly indicated in > syslog.conf(4). > > Putting more than one loghost entry in /etc/resolv.conf probably > means that you're only passing logs to the last one mentioned. > (Either that or the first one, not sure how Solaris's resolver > library would choose to deal with that situation.) > > I'd drop any reliance on the loghost hostname completely, if I were > you. Just do this: > > *.err;kern.debug;daemon.notice;mail.crit @loghost01 > *.err;kern.debug;daemon.notice;mail.crit @loghost02 > *.err;kern.debug;daemon.notice;mail.crit /var/adm/messages > > -- > gabriel rosenkoetter > gr@eclipsed.net _______________________________________________ sunmanagers mailing list sunmanagers@sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagersReceived on Wed Dec 3 05:03:05 2003
This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:43:24 EST