Hi everyone
Removed spaces from syslog.conf, but still its not working. The error from
the debug-output did vanish though.
Chanced *.* to *.debug, and that gave me this output, when running in
debug-mode and, just for an example, made an ssh to the tru64-box with a
wrong password:
Logging to FORW mylogserver.mynet.net
and this looks good, but the messages from the local auth.log is NOT comming
in the logservers files.
Local auth.log:
Mar 8 19:40:36 tru64box sshd[170247]: Failed password for someuser from
172.16.
0.4 port 1023
Mar 8 19:40:39 tru64box last message repeated 2 times
Mar 8 19:40:39 tru64box sshd[170247]: Connection closed by 172.16.0.4
My syslog.conf looks like this right now:
kern.debug /var/adm/syslog.dated/kern.log
user.debug /var/adm/syslog.dated/user.log
mail.debug /var/adm/syslog.dated/mail.log
daemon.debug /var/adm/syslog.dated/daemon.log
auth.debug /var/adm/syslog.dated/auth.log
syslog.debug /var/adm/syslog.dated/syslog.log
lpr.err /var/adm/syslog.dated/lpr.log
msgbuf.err /var/adm/crash/msgbuf.savecore
kern.debug /var/adm/messages
kern.debug /dev/console
*.emerg *
*.debug _at_mylogserver.mynet.net
Med venlig hilsen/Kind Regards
Danny Petterson Driftbolaget A/S.
System Engineer
HTTP://WWW.DRIFTBOLAGET.COM
TLF: +45 21716422 Danny.Petterson_at_Driftbolaget.com
"An expert is a man who has made all the mistakes
which can be made in a very narrow field"
Niels Bohr
Received on Thu Mar 08 2001 - 19:00:39 NZDT