Logging Cisco PIC Syslog to SuSE 7.0 machine
![](https://seccdn.libravatar.org/avatar/a3fbb37ce39b8abd4fa43f11de4c416f.jpg?s=120&d=mm&r=g)
Has aynoe had any problems logging to syslog on a SuSE 7.0 machine. I am trying to route the Syslog messages from our firewalls (PIX 515 & 520's) to a 7.0 box. I have configured /etc/syslog.conf correctly, as I have many times in the past (just not with SuSE) I have hgad these PIX's logging correctly to RedHat6.2 machines but these have been Replaced with SuSE. Here is what I added to /etc/syslog.conf, yes I use TABS instead of spaces. # # PIX Firewall Syslog # local7.emerg /var/log/pix/ipix.log local7.alert /var/log/pix/ipix.log local7.crit /var/log/pix/ipix.log local7.error /var/log/pix/ipix.log local4.emerg /var/log/pix/ipix.log local4.alert /var/log/pix/ipix.log local4.crit /var/log/pix/ipix.log local4.error /var/log/pix/ipix.log I restarted syslog, nothing complained, it also created the ipix.log file, size 0. The PIX is generating the syslogs but nothing is being logged to the SuSE box. The PIX is configured to log to local7, but local4 is the default, I added both for debugging purposes. Anyone have any ideas? Thanks, CC --- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570
![](https://seccdn.libravatar.org/avatar/e4875fba809bee7a8701ffd3bd830274.jpg?s=120&d=mm&r=g)
On Wed, Aug 15, 2001 at 06:14:20PM -0700, Chuck wrote:
Has aynoe had any problems logging to syslog on a SuSE 7.0 machine. I am trying to route the Syslog messages from our firewalls (PIX 515 & 520's) to a 7.0 box.
I have configured /etc/syslog.conf correctly, as I have many times in the past (just not with SuSE) I have hgad these PIX's logging correctly to RedHat6.2 machines but these have been Replaced with SuSE.
Here is what I added to /etc/syslog.conf, yes I use TABS instead of spaces. # # PIX Firewall Syslog #
local7.emerg /var/log/pix/ipix.log local7.alert /var/log/pix/ipix.log local7.crit /var/log/pix/ipix.log local7.error /var/log/pix/ipix.log local4.emerg /var/log/pix/ipix.log local4.alert /var/log/pix/ipix.log local4.crit /var/log/pix/ipix.log local4.error /var/log/pix/ipix.log
I restarted syslog, nothing complained, it also created the ipix.log file, size 0.
The PIX is generating the syslogs but nothing is being logged to the SuSE box. The PIX is configured to log to local7, but local4 is the default, I added both for debugging purposes.
Anyone have any ideas?
What does SYSLOGD_PARAMS variable contain (in /etc/rc.config)? Did you put -r option there? -Kastus
Thanks, CC
--- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
![](https://seccdn.libravatar.org/avatar/a3fbb37ce39b8abd4fa43f11de4c416f.jpg?s=120&d=mm&r=g)
No, I have "-m 0". I will try the r switch. Thannks, CC --- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570 -----Original Message----- From: Konstantin (Kastus) Shchuka [mailto:kastus@tsoft.com] Sent: Wednesday, August 15, 2001 6:32 PM To: suse-linux-e@suse.com Subject: Re: [SLE] Logging Cisco PIC Syslog to SuSE 7.0 machine On Wed, Aug 15, 2001 at 06:14:20PM -0700, Chuck wrote:
Has aynoe had any problems logging to syslog on a SuSE 7.0 machine. I am trying to route the Syslog messages from our firewalls (PIX 515 & 520's) to a 7.0 box.
I have configured /etc/syslog.conf correctly, as I have many times in the past (just not with SuSE) I have hgad these PIX's logging correctly to RedHat6.2 machines but these have been Replaced with SuSE.
Here is what I added to /etc/syslog.conf, yes I use TABS instead of spaces. # # PIX Firewall Syslog #
local7.emerg /var/log/pix/ipix.log local7.alert /var/log/pix/ipix.log local7.crit /var/log/pix/ipix.log local7.error /var/log/pix/ipix.log local4.emerg /var/log/pix/ipix.log local4.alert /var/log/pix/ipix.log local4.crit /var/log/pix/ipix.log local4.error /var/log/pix/ipix.log
I restarted syslog, nothing complained, it also created the ipix.log file, size 0.
The PIX is generating the syslogs but nothing is being logged to the SuSE box. The PIX is configured to log to local7, but local4 is the default, I added both for debugging purposes.
Anyone have any ideas?
What does SYSLOGD_PARAMS variable contain (in /etc/rc.config)? Did you put -r option there? -Kastus
Thanks, CC
--- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
![](https://seccdn.libravatar.org/avatar/a3fbb37ce39b8abd4fa43f11de4c416f.jpg?s=120&d=mm&r=g)
Ok. One more problem. Now it is logging to /var/log/messages and /var/log/pix/ipix.log. The same identical logs are going to both files. Anyone have any ideas? Thanks -CC --- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570 -----Original Message----- From: Chuck [mailto:suse@clinicomp.com] Sent: Thursday, August 16, 2001 10:08 AM To: 'Konstantin (Kastus) Shchuka'; suse-linux-e@suse.com Subject: RE: [SLE] Logging Cisco PIC Syslog to SuSE 7.0 machine No, I have "-m 0". I will try the r switch. Thannks, CC --- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570 -----Original Message----- From: Konstantin (Kastus) Shchuka [mailto:kastus@tsoft.com] Sent: Wednesday, August 15, 2001 6:32 PM To: suse-linux-e@suse.com Subject: Re: [SLE] Logging Cisco PIC Syslog to SuSE 7.0 machine On Wed, Aug 15, 2001 at 06:14:20PM -0700, Chuck wrote:
Has aynoe had any problems logging to syslog on a SuSE 7.0 machine. I am trying to route the Syslog messages from our firewalls (PIX 515 & 520's) to a 7.0 box.
I have configured /etc/syslog.conf correctly, as I have many times in the past (just not with SuSE) I have hgad these PIX's logging correctly to RedHat6.2 machines but these have been Replaced with SuSE.
Here is what I added to /etc/syslog.conf, yes I use TABS instead of spaces. # # PIX Firewall Syslog #
local7.emerg /var/log/pix/ipix.log local7.alert /var/log/pix/ipix.log local7.crit /var/log/pix/ipix.log local7.error /var/log/pix/ipix.log local4.emerg /var/log/pix/ipix.log local4.alert /var/log/pix/ipix.log local4.crit /var/log/pix/ipix.log local4.error /var/log/pix/ipix.log
I restarted syslog, nothing complained, it also created the ipix.log file, size 0.
The PIX is generating the syslogs but nothing is being logged to the SuSE box. The PIX is configured to log to local7, but local4 is the default, I added both for debugging purposes.
Anyone have any ideas?
What does SYSLOGD_PARAMS variable contain (in /etc/rc.config)? Did you put -r option there? -Kastus
Thanks, CC
--- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
![](https://seccdn.libravatar.org/avatar/a3fbb37ce39b8abd4fa43f11de4c416f.jpg?s=120&d=mm&r=g)
Ahhh. Bullseye. Thanks for the tip. If I would have just read the *)(@#$ man Page! I think on Solaris this is a default setting. ? Thanks again, CC --- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570 -----Original Message----- From: Konstantin (Kastus) Shchuka [mailto:kastus@tsoft.com] Sent: Wednesday, August 15, 2001 6:32 PM To: suse-linux-e@suse.com Subject: Re: [SLE] Logging Cisco PIC Syslog to SuSE 7.0 machine On Wed, Aug 15, 2001 at 06:14:20PM -0700, Chuck wrote:
Has aynoe had any problems logging to syslog on a SuSE 7.0 machine. I am trying to route the Syslog messages from our firewalls (PIX 515 & 520's) to a 7.0 box.
I have configured /etc/syslog.conf correctly, as I have many times in the past (just not with SuSE) I have hgad these PIX's logging correctly to RedHat6.2 machines but these have been Replaced with SuSE.
Here is what I added to /etc/syslog.conf, yes I use TABS instead of spaces. # # PIX Firewall Syslog #
local7.emerg /var/log/pix/ipix.log local7.alert /var/log/pix/ipix.log local7.crit /var/log/pix/ipix.log local7.error /var/log/pix/ipix.log local4.emerg /var/log/pix/ipix.log local4.alert /var/log/pix/ipix.log local4.crit /var/log/pix/ipix.log local4.error /var/log/pix/ipix.log
I restarted syslog, nothing complained, it also created the ipix.log file, size 0.
The PIX is generating the syslogs but nothing is being logged to the SuSE box. The PIX is configured to log to local7, but local4 is the default, I added both for debugging purposes.
Anyone have any ideas?
What does SYSLOGD_PARAMS variable contain (in /etc/rc.config)? Did you put -r option there? -Kastus
Thanks, CC
--- Chuck Carson Sr. Systems Engineer San Diego, California O: +1 (858) 646-2095 F: +1 (858) 297-8570
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
participants (2)
-
Chuck
-
Konstantin (Kastus) Shchuka