Setting Syslog For Log Server - NEC Express5800/R320c-E4 Installation Manual

Chapter 2 Installing the Bundled Software
3.2

Setting Syslog for Log Server

Set the 514/udp port in waiting state on the log server side. Additionally, the configuration to output
transferred logs to /var/log/messages needs to be set as well.
Examples of setting an environment to use syslog
1. To set the 514/udp port in waiting state, edit /etc/sysconfig/syslog.
<Before the change>
SYSLOGD_OPTIONS="-m 0"
<After the change>
SYSLOGD_OPTIONS="-m 0 -r"
2. To output transferred logs to /var/log/messages, edit /etc/syslog.conf.
<Before the change>
*.info;mail.none;authpriv.none;cron.none /var/log/messages
<After the change>
*.info;mail.none;authpriv.none;cron.none;local4.none;local6.notice /var/log/messages
3. Restart syslog.
# service syslog restart
Examples of setting an environment to use rsyslog
1. To set the 514/udp port in waiting state, edit /etc/sysconfig/rsyslog.
<Before the change>
# Provides UDP syslog reception
#$ModLoad imudp.so
#$UDPServerRun 514
<After the change>
# Provides UDP syslog reception
$ModLoad imudp.so
$UDPServerRun 514
2. To output transferred logs to /var/log/messages, edit /etc/rsyslog.conf.
<Before the change>
*.info;mail.none;authpriv.none;cron.none /var/log/messages
<After the change>
*.info;mail.none;authpriv.none;cron.none;local4.none;local6.notice /var/log/messages
3. Restart rsyslog.
# service rsyslog restart
72
Express5800/R320c-E4, R320c-M4 Installation Guide (VMware)
Note
The setting method may be changed depending on the package version. For the setting
method, refer to Help, etc. for .conf files. For example, Help for rsyslog.conf can be
checked by running the man command as below.
# man rsyslog.conf
3. Steps for Configuring the Log Server