Not being at all familiar with syslog under Mac OS X, the most obvious things I'd check are as follows: 1) is syslogd being restarted after log rotation? 2) is syslogd being invoked with the correct flags/args to allow hosts from the network to log to it (i.e. -r) Hope this helps. Malcolm On Tue, 2004-07-13 at 05:30, Ken Toney wrote: > I have a OS X 10.3.4 system configured as a central log server. I want > to use this computer to archive and analyze all syslogs from our > computers and network equipment. When I rotate the logs at night, using > the etc/daily and etc/weekly maintenance scripts, remote logging stops > on the the computer. It will log local events however. On the advice of > a friend I changed the method for restarting syslog after log rotation > by editing the lines in the periodic scripts as follows: > > Replaced these lines > if [ -f /var/run/syslog.pid ]; then kill $(cat /var/run/syslog.pid | > head -1) > echo "" > > With these: > kill $(cat /var/run/syslog.pid) > /usr/sbin/syslogd > echo "" > > This has not helped though. Any advice? > > Thanks, > Ken Toney > > _______________________________________________ > LogAnalysis mailing list > LogAnalysis@private > http://lists.shmoo.com/mailman/listinfo/loganalysis _______________________________________________ LogAnalysis mailing list LogAnalysis@private http://lists.shmoo.com/mailman/listinfo/loganalysis
This archive was generated by hypermail 2.1.3 : Sat Jul 17 2004 - 00:33:34 PDT