Syslog config Issue.

UNIX Solaris
1

Hi All,

I have configured a centralised system log server.

The /etc/syslog.conf file in my client(Sol 5.10) looks like this.

 
[3]e1011605: cat /etc/syslog.conf
#
# Copyright (c) 2000-2002 by Sun Microsystems, Inc.
# All rights reserved.
#
#ident  "@(#)syslog.conf        2.3     02/02/21        SMI"
#
# This "syslog.conf" file was installed by JASS.  This
# file should be used to log information both locally as
# well as to a centralized log server (or servers) so that
# proactive log analysis can be done.
*.err;kern.notice;auth.notice   @10.164.105.133
*.alert                         @10.164.105.133
*.emerg                         @10.164.105.133
*.debug                         @10.164.105.133

The problem is all my logs are now directly being sent to syslog server(which ofcourse is what syslog server is meant for).
My question is,Is there any way i can retain the logs in my local server also.

I tried adding it like below,but it didn't work out.

1) if

 
*.emerg                         @10.164.105.133,/var/adm/messages

Thanks
HG

2

You cannot use a list as the action field in your case but this should just work.

*.emerg    /var/adm/messages
*.emerg    @10.164.105.133
*.emerg    *
3

Thank You. That worked.

HG