UNIX for Advanced & Expert Users

How can I setup the syslog.log file ?

Read the man page for syslogd - it's explained rather well.

$ man syslogd

Some quick excerpts:
The syslogd command reads and logs messages into a set of files
described by the configuration file /etc/syslog.conf.

syslogd configures itself when it starts up and whenever it receives a hangup signal.


For example, the configuration file:

kern,mark.debug /dev/console
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root,eric,kridle
*.emerg *
*.emerg @admin

logs all kernel messages and 20 minute marks onto the system console, all mail system messages to /var/adm/syslog/mail.log, and all messages at info and above, except mail messages, to the file /var/adm/syslog/syslog.log. Messages at alert and above are logged to the console and to the users root, eric, and kridle if they are logged in. emerg messages are written to all logged-in users' terminals, and forwarded to the host admin.

After you set up syslog.conf the way you like, I'dd strongly recommend to look at the tool logsurfer. I use it for our current HP config as well and it helped me out to find a hack-attempt, system diengs within a minute, etc.

You can find their homepage : http://www.cert.dfn.de/eng/logsurf/

If you want the pre-compiled and completely configured version just let me know by sending me a message or email. I have it already working on our HP-ux 11.00 systems.

Regs David