[Discuss] Help with destination of syslog messages?

[tmetro-blu at vl.com (Tom Metro)]

Richard Pieri wrote:
> Perhaps your syslog daemon isn't configured for remote access?

That'd be my guess. Debian-universe distributions have remote reception
turned off by default. Other distributions probably do likewise.

netstat should be able to confirm if it is listening on the syslog port.


> If it doesn't show up in /var/log/messages or /var/log/syslog then it
> isn't being written anywhere.

I sometimes create a temporary rule that wildcards all facilities and
priorities and writes them to a file so you can first confirm that
syslog is passing through the messages you expect. Then you can write
specific rules to put the messages where you want.

 -Tom

-- 
Tom Metro
Venture Logic, Newton, MA, USA
"Enterprise solutions through open source."
Professional Profile: http://tmetro.venturelogic.com/