H3C S9500 Series Operation Manual page 1459

Operation Manual – Information Center
H3C S9500 Series Routing Switches
Note:
Note the following points when editing /etc/syslog.conf:
The note must occupy a line and start with the character #.
There must be a tab other than a space as the separator in selector/actor pairs.
No redundant space after file name.
The device name and the acceptant log information level specified in
/etc/syslog.conf must be consistent with information center loghost and information
center loghost a.b.c.d facility configured on the switch. Otherwise, the log
information probably cannot be output to the loghost correctly.
Step 3: After the establishment of information (log file) and the revision of
/etc/syslog.conf, you should send a HUP signal to syslogd (system daemon), through
the following command, to make syslogd reread its configuration file /etc/syslog.conf.
# ps -ae | grep syslogd
147
# kill -HUP 147
After the above operation, the switch system can record information in related log files.
Note:
Through combined configuration of the device name (facility), information severity
threshold (severity), module name (filter) and "syslog.conf" file, you can classify
information precisely for filtering.
1.4.2 Configuration Example of Sending Log to the Linux Loghost
I. Network requirements
The Network requirements are as follows:
Sending the log information of the switch to LINUX loghost
The IP address of the loghost is 202.38.1.10
The information with the severity level above informational will be sent to the
loghost
The output language is English
All modules are allowed to output information
1-27
Chapter 1 Information Center