06-03-2002
n/a,
0
Since syslog won't do what you want by itself, you will have to create a script (or two...) to make it work.
But, if you set up all the 'clients' to send all the info to one server (loghost), and then set up the server to send different levels of different alerts to different files, it may not be as bad as just one big file. You can see examples as follows in the man page for syslog.conf (on Solaris).
mail.info /var/log/notice
*.crit /var/log/critical
kern,mark.debug /dev/console
kern.err @server