Basically the procedure is as follows: 1. install/configure RH Linux 2. harden Linux *** 3. configure/compile/install Postgresql 4. create db + tables 5. configure/compile/install Msyslog 6. stop/uninstall standard syslog 7. create conf files for syslog 8. create auto start scripts 9. test logging with separate network 10. install odbc on reporting station 11. configure ipchains/iptables 12. activate syslog
We use extensive documentation in our company, but most docs contain internal information, and we haven't found time yet to clean them up in order to publsih them, but this will be done asap. Most of our docs are based anyways on std install docs of software, thus to be found online anyways. gijs -----Original Message----- From: Michael E. Kelly [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 8:48 PM To: [EMAIL PROTECTED] Subject: RE: [WhatsUp Forum] syslog Sounds like a real job to set up. You have a How-To for this, or was it built on high ingenuity and a lot of skull sweat? ---------------------------------------- Mike Kelly Data Centre Technical Manager Maxil Communications Ltd. [EMAIL PROTECTED] Voice: 242-502-8663 Fax: 242-502-8631 Pager: 242-383-3821 -----Original Message----- From: Gijs Wuyts [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 12:23 PM To: '[EMAIL PROTECTED]' Subject: RE: [WhatsUp Forum] syslog We have 1 (actually a cluster) centralized syslog server, using redhat 7.2, Postgresql as a database, and Modular syslog (sourceforge.net) as logger. It allows for multiple formats (DB, file-hashing, etc) and hardcopy logs. monitoring/notif happens through WhatsUp, which itself also reports to our syslog. The DB allows for reporting and querying, the file-hashing allows for content integrity verification, and the hardcopy printing allows for almost 100% foolproof proof of events. Very important if you use this infrastructure to try and correlate events is to make sure all clocks are synchronized using the same, authenticated source. g -----Original Message----- From: Jason Benway [mailto:[EMAIL PROTECTED]] Sent: Friday, February 08, 2002 10:06 PM To: '[EMAIL PROTECTED]' Subject: [WhatsUp Forum] syslog I know what's up gold has a syslog view built in. But it seems so thin. You can't view it though the web. So you have to start the application to view the syslog. I'm sure there are better syslog reporters/viewers out there. What does everyone else us? I'm testing Kiwi syslog beta, but having a few issues. Any other good ones out there? Thanks,jb Jason Benway [EMAIL PROTECTED] 1250 S.Beechtree Grand Haven, MI 49417 616-847-8474 Fax: 616-850-1208 Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
