Zenoss doesn't receive the raw logs as such (well it doesn't store them). It uses ZenSyslog (assuming it's working right and not conflicting with a syslog-ng instance), which converts syslogs into events in Zenoss. You probably want to search on ZenSyslog in the forums for info on converting syslogs into events, and also check the admin guide on that. -- James Pulver Information Technology Area Supervisor LEPP Computer Group Cornell University
remotesyslog wrote, On 4/27/2009 12:54 PM: > Hi > > > I have a device (firewall) which on reset, looses all its logs. I have set > the zenoss IP as the remote syslog server, with the intention that it will > offload the logs to zenoss. Problem is that I do not know what to put in the > /etc/syslog.conf file on my zenoss machine to make it recieve the logs and > place them into the correct log file for archiving. the code I have currently > which does not work is as follows: > > Code: > > #firewall to firewall log > +...@firewall # host is the name of the machine that sends > messages > *.* /var/log/firewall.log > +* # resets the log source specification... > > > > > The name of the machine should be firewall, but i cant find where the log > messages are currently going (would assume /var/log/messages but i dont see > any entries. > > I am pretty sure the server is listeing for messages: > > Code: > > [r...@zenoss log]# netstat -a |grep syslog > udp 0 0 *:syslog *:* > > > > > any idea what I am doing wrong? Zenoss is already set up to receive some sort > of events from the firewall, as it tells me when the IP goes down and also > some messages that are in the system log. > > > What I want to find is the raw logs. Any idea where they would be? > > thanks > > > > > -------------------- m2f -------------------- > > Read this topic online here: > http://forums.zenoss.com/viewtopic.php?p=33913#33913 > > -------------------- m2f -------------------- > > > > _______________________________________________ > zenoss-users mailing list > [email protected] > http://lists.zenoss.org/mailman/listinfo/zenoss-users _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
