by I setup a FreeBSD 4.7 server to be a syslog server for a network with nodes
around the globe. We started with a test to collect syslog messages from
just one router in the Middle East. We entered the following line in the
syslog.conf file:
local5.debug /var/log/router.log
and started syslogd using the following command:
/usr/sbin/syslogd -a 10.10.10.2
No logging occurred even though the documentation for syslogd indicates this
is the way to collect log entries from a remote system.
Since the -s option (to disable logging from external sources) is the
default, we entered syslogd_flags="" in the rc.conf file.
It still did not log the entries from the remote.
When we removed the "-a 10.10.10.2" from the command to start the syslogd
service it started working. However, we had to shut down syslogd and
restart it before it would work. kill -HUP 'cat /var/run/syslog.pid' would
not restart syslogd in a working state. The only way was to kill syslogd
completely and start it without command line parameters.
At that point the logging started immediately.
Summary:
1. Enter services to be logged in the syslog.conf file.
2. Override the "-s" option in /etc/default/rc.conf by entering
syslogd_flags-"" in the /etc/rc.conf file.
3. Start /usr/sbin/syslogd without command line parameters.
This works.
--
Mike Todd
Director, Engineering, GServices www.gservices.info
President, Mike Todd Associates www.MikeTodd.com
Supporting the Digital Coast
President, Internet Society Los Angeles Chapter www.ISOC-LosAngeles.org
Center for Entrepreneurship and Technology Law
Pepperdine University Law School