Setup Syslog

Setup Syslog

1. change your syslog.conf or syslog-ng.conf
2. when you setup syslog on your zenoss system, make sure your System syslog is not listening on port 514

syslog.conf

*.warn;mail.none;news.none         @<YourZenossIP>
mail.err                           @<YourZenossIP>

syslog-ng.conf

source zenoss_src {
        internal();
        unix-dgram("/dev/log");
 };
filter zenoss_warn { level(warn, err, crit) and not filter(f_iptables); };
destination zenoss{ udp("<YourZenossIP>" port(514)); };
log { source(zenoss_src); filter(zenoss_warn); destination(zenoss); };

Windows Syslog

Install Datagram Syslog Client http://syslogserver.com on your Windows system. Just follow setupguide, it is really easy

DEBUGGING

1. try $ZENHOME/bin/zensyslog status, it must be running.
2. if not check if your system syslog is running on port 514, if yes disable.
3. setup syslog sending to zenoss system.
4. zry logger -p crit test on remote system
5. event must show up
6. if not stop zensyslog and start it with $ZENHOME/zensyslog start -v10
7. do tail -f $ZENHOME/log/zensyslog.log
8. try logger again
9. have a look at the output