Here is what we code. You have to add offload info for every SYSLOGD stream you are writing or it wont offload it.
ArchiveTimeOfDay 00:01 BeginArchiveParms DSNPrefix TEMPG.PDP.SYSLOGD.&SYSNAME Unit SYSDA EndArchiveParms daemon.err;*.SYSLOGD*.*.none;*.INETD*.*.none /var/log/daemon -N DAEMON(+1) auth.* /var/log/auth -N AUTH(+1) mail.* /var/log/mail -N MAIL(+1) *.err /var/log/errors -N ERRORS(+1) *.debug /var/log/trace -N TRACE(+1) *.INETD*.*.* /var/log/inetd -N INETD(+1) *.trmd*.*.* /shared/PROD/trmd/trmdTEC1 -N TRMD(+1) _________________________________________________________________ Dave Jousma Mainframe Engineering, Assistant Vice President david.jou...@53.com 1830 East Paris, Grand Rapids, MIĀ 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of saurabh khandelwal Sent: Monday, December 3, 2018 11:08 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SYSLOGD Automation **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** Hello Group, We have requirement to automate the archival process of syslogd logs from omvs and placing them in dataset on regular process. I looked at SYSLOGD address space and find that parm file is used for this is from TCPIP.TCPPARMS(SYSLOG) and I made below modification to start archival process. details about specifying rules. # ArchiveTimeOfDay 07:00 ArchiveThreshold 50 ArchiveCheckInterval 600 # BeginArchiveParms DSNPrefix TESB.ARCHIVE Volume TSO020 RetPd 30 EndArchiveParms # *.SYSLOGD.daemon.* /var/logs/syslogd/daemon.notice -N daemon.n # Write all messages with priority err and higher to log file errors. # # THIS EXAMPLE STATEMENT IS UNCOMMENTED. # *.* /tmp/ivp.syslog.log # Now, I can see archival dataset generated on regular interval from the above parameter I mentioned in SYSLOG parm file but its not full syslogd log, which we should be seeing it. Can you please help, if anything more should be modified to make this process work . ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN