Hi
I have a device (firewall) which on reset, looses all its logs. I have set the zenoss IP as the remote syslog server, with the intention that it will offload the logs to zenoss. Problem is that I do not know what to put in the /etc/syslog.conf file on my zenoss machine to make it recieve the logs and place them into the correct log file for archiving. the code I have currently which does not work is as follows: Code: #firewall to firewall log +...@firewall # host is the name of the machine that sends messages *.* /var/log/firewall.log +* # resets the log source specification... The name of the machine should be firewall, but i cant find where the log messages are currently going (would assume /var/log/messages but i dont see any entries. I am pretty sure the server is listeing for messages: Code: [r...@zenoss log]# netstat -a |grep syslog udp 0 0 *:syslog *:* any idea what I am doing wrong? Zenoss is already set up to receive some sort of events from the firewall, as it tells me when the IP goes down and also some messages that are in the system log. What I want to find is the raw logs. Any idea where they would be? thanks -------------------- m2f -------------------- Read this topic online here: http://forums.zenoss.com/viewtopic.php?p=33913#33913 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
