MonitorWare Knowledge Base

Hi all,

I will start by saying that i am complete new to Debian (and linux in gerneral)
I have managed to install rsyslog following several web articles....my question is what so i need to add to rsyslog.conf to make
my cisco routers to sent log messages to rsyslog. I have added the line "local7.* -/var/log/network.log" but it doesn't seem to do anything...
do i also have to change anything to this file '/etc/sysconfig/rsyslog'?
Please note that on my xp machine i am running kiwi syslog and it receives logs just fine....
I have also disabled klogd and sysklogd to start during system boot....

Thanks in advance....

regards,
Aris

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

quick question: which version of rsyslog have you installed? Also, did you install from source or did you use a package?

hi thanks for the reply....

i used the install package 3.18.1-1...do you think it's better if i use the source file instead?

Can you post your rsyslog configuration file?

-HKS

Ahh...well i am not even sure if i got the installation correct....
I have found so many guides in the web and each one says different things.
Here is what i did to install the package.
1. Downloaded the source from the site
2. unpack ./configure -mysql (for sql support)
3. make
4. make install
I don't get any errors but i cant find any conf files either. Do i have to create them on my own? and if yes
in which dirrectories and what files do i need? If someone could make a list of the needd files it will be
most helpfull.

Thanks in advance

Hi,
Just installing dont get you rsyslog.conf to the right place. You can check for rsyslog.conf in your rsyslog directory. If you did not find it any where you can just rename the file syslog.conf as rsyslog.conf. It will work perfectly. You can make what ever changes you want in that configuration file.

Remember that rsyslog.conf should be in /etc directory.

Regards,
Prakash.

Hi all and thanks for your replies:))

I think i have managed to create an rsyslog.conf file so my next step is creating the rsyslog in /etc/init.d
I am planning of editing the default syslog file. There is a line the defines the path to sysklogd.pid so my guess is that i will have to change the line to the path to rsyslogd.pid....problem is i can;t find the file. Should there be a file or does it get created once i run the proccess?

PID files are created at runtime by their processes. Every process running on a *nix system has a unique process ID (PID) number assigned to it - this file simply stores that number. It's often used as a lockfile (ie, every time you start up xyz process it checks for xyz.pid and quits if it exists), or as a quick way to find the PID for a process whose name is known.

-HKS

Woohooo....finally got it working....my next step is try and write the logs to a database. i will follow the guide on the site and see if it works....thank you very much people....)))
thread closed:)))