Here is what we code.  You have to add offload info for every SYSLOGD stream 
you are writing or it wont offload it.

ArchiveTimeOfDay         00:01                 
BeginArchiveParms                              
  DSNPrefix TEMPG.PDP.SYSLOGD.&SYSNAME         
  Unit SYSDA                                   
EndArchiveParms                                

daemon.err;*.SYSLOGD*.*.none;*.INETD*.*.none /var/log/daemon -N DAEMON(+1)      
auth.* /var/log/auth -N AUTH(+1)     
mail.* /var/log/mail -N MAIL(+1)              
*.err            /var/log/errors -N ERRORS(+1)                       
*.debug          /var/log/trace -N TRACE(+1)                     
*.INETD*.*.* /var/log/inetd -N INETD(+1)                         
*.trmd*.*.* /shared/PROD/trmd/trmdTEC1 -N TRMD(+1)               

_________________________________________________________________
Dave Jousma
Mainframe Engineering, Assistant Vice President
david.jou...@53.com
1830 East Paris, Grand Rapids, MIĀ  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of saurabh khandelwal
Sent: Monday, December 3, 2018 11:08 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: SYSLOGD Automation

**CAUTION EXTERNAL EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

Hello Group,

We have requirement to automate the archival process of syslogd logs from omvs 
and placing them in dataset on regular process.

I looked at SYSLOGD address space and find that parm file is used for this is 
from TCPIP.TCPPARMS(SYSLOG) and I made below modification to start archival 
process.


 details about specifying rules.

#

    ArchiveTimeOfDay         07:00

    ArchiveThreshold         50

    ArchiveCheckInterval     600

#

    BeginArchiveParms

      DSNPrefix              TESB.ARCHIVE

      Volume                 TSO020

      RetPd                  30

    EndArchiveParms

#

   *.SYSLOGD.daemon.*       /var/logs/syslogd/daemon.notice -N daemon.n



# Write all messages with priority err and higher to log file errors.

#

# THIS EXAMPLE STATEMENT IS UNCOMMENTED.

#

*.*        /tmp/ivp.syslog.log
#

Now, I can see archival dataset generated on regular interval from the above 
parameter I mentioned in SYSLOG parm file but its not full syslogd log, which 
we should be seeing it.

Can you please help, if anything more should be modified to make this process 
work .

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL 
EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to