Linux

Hi,

My name is SAMKZ and I'm a dummy with Linux and I'm so sad about that.

I need to have a Syslog Server to archive Logs from my Cisco Routers and Switches.

I'd like to know to most robust way of doing this.

I've installed Centos 5.9 and Trixbox both on VMWares.

I've read around but to be frank, I don't know very simple things. I don't know which file to check for example to see if my VMWare receives theLogs on UDP 514 redirected port from my Gateway. I don't know for example how to disable local loggings to minimize the size of the files.



I'd appreciate if you could help me.

Thanks

Most robust would be to have the syslog server be a broadcast address on a small subnet, where there are two LINUX boxes providing redundant syslog service. Syslog should use udp packets, so both machines will log the same packets.

Logging on every syslog server is controlled by the configuration file, which specifies key filters for each configured output file.
Man Page for syslog.conf (all Section 4) - The UNIX and Linux Forums
Man Page for syslogd (all Section 1m) - The UNIX and Linux Forums

If the syslog is configured remote, the local server should not be seeing the packets, unless it is double-logging.

I usually google for tutorials to get started.
syslog tutorial - Google Search