forwarded syslog messages are missing originating hostname

From: Larkin, Eric (NE) (Eric.Larkin_at_gd-ns.com)
Date: 09/27/05

  • Next message: Tom Crummey: "screensaver/power management does not activate in Solaris 10" 
    Date: Tue, 27 Sep 2005 16:02:55 -0400
To: sunmanagers@sunmanagers.org

    I am running Solaris 9 with the latest_recommended. I have set up my servers
    to send their syslog messages to a central server, and then set up that server
    as a relay server to forward all syslog messages to a third server. This
    works, but the messages sent to the third server are stripped of the
    originating servers hostname and state that they are only from the relay
    server. I have researched this but have not come up with any solutions, any
    help would be appreciated.

    Eric
    _______________________________________________
    sunmanagers mailing list
    sunmanagers@sunmanagers.org
    http://www.sunmanagers.org/mailman/listinfo/sunmanagers

  • Next message: Tom Crummey: "screensaver/power management does not activate in Solaris 10"

    Relevant Pages

    • RE: Syslog over Internet
      ... country to the next, your personal data logs would probably go thru 20+ ... They could find the syslog server easily, and quite possibly, get into ... > better to log all your syslog messages on a different machine. ... attack, since the evidence will be stored elsewhere. ...
      (Security-Basics)
    • Re: Syslog over Internet
      ... >> I have hired a server located in a different country. ... >> better to log all your syslog messages on a different machine. ... > attack, since the evidence will be stored elsewhere. ...
      (Security-Basics)
    • Re: remote syslogging
      ... > I've got a Solaris 9 server located at a co-location place and we've got ... > at a local site a log host to log all syslog message from other servers. ... > co-location place to send all syslog messages over the internet to the ...
      (comp.unix.solaris)
    • Re: syslog and email
      ... I am forwarding all syslog messages to 1 server. ... email me an alert once a particular alert occurs? ... As you have a syslog server, you just have to install logcheck on it. ...
      (Debian-User)
    • Re: VPN 3005, syslog and Kiwi service
      ... I suggeust you use AUTH-6 level inorder to get the info you need. ... I would like to get syslog messages sent only when ... I have Log, Console, and Syslog set to Use Event List, and I would like ... I have the server set ...
      (comp.dcom.sys.cisco)