On Thu, 26 Sep 2002, Scott Koos wrote: > Hi All, > > Don't mean to interrupt, but could someone please point me to some > documentation on creating a "log host". This sounds like something I'd > like to try. >
What's to document? Create a system that runs syslogd (with remote reception turned on) sshd (so you can get into it) Give it as little RAM as possible - on Intel, maybe 4 or 8 MBytes. Configure it with whatever log rotation/archival rules seem good to you. Configure its firewall rules to permit ssh/tcp, syslog/udp and appropriate icmp from appropriate sources. Maybe clone it so you can take it down if you ever need to. I suppose configure VM to IPL it first, take it down last. Test it. Configure others to log to it. -- Cheers John. Please, no off-list mail. You will fall foul of my spam treatment. Join the "Linux Support by Small Businesses" list at http://mail.computerdatasafe.com.au/mailman/listinfo/lssb
