Centralized syslog server

UNIX for Advanced & Expert Users
1

I have a syslog server running Solaris 5.9 that is used exclusively to receive log messages from several thousand Cisco devices. The syslog server is and has been running fine for several months..

I would like to take all messages logged from the Cisco devices on this server and forward them to another "Centralized" logging server. From what I've been able to find, this is done quiet often and is referred to as a Centralized syslog server.

Please see the attached /etc/syslog.conf file from the box that's working today. The messages from the Cisco devices are written to the /var/log/rtrlog file as shown 2 lines from the bottom of the file. Again, this works today. Please look at the last line which I would like to add that will forward these messages to another syslog server w/ an IP address of 10.10.10.10 (example address).

Will this work?

Thank in advance for any input...

2

or do I make the last line look like this?

local7.debug@10.10.10.10;local6.debug@10.10.10.10;local5.debug@10.10.10.10;local4.debug@10.10.10.10;local3.debug@10.10.10.10;local2.debug@10.10.10.10;local1.debug@10.10.10.10;local0.debug@10.10.10.10

instead of like this
local7.debug;local6.debug;local5.debug;local4.debug;local3.debug;local2.debug;local1.debug;local0.debug @10.10.10.10

Please see the updated attached file...

3

local7.debug;local6.debug;local5.debug;local4.debug;local3.debug;local2.debug;local1.debug;local0.debug<TAB>@server_name.

Make sure you have the IP address and server_name in /etc/hosts file. After that, perform kill -HUP <pid of syslogd>.