Peter Kiem said: > Can't you just filter them based on server name in the logs?
if your syslog server runs syslog-ng yes. Last I checked the normal syslog server did not have such support. > > One thing I did want to know before starting, if you are using the > standard Red Hat syslog like you are, and send the logs to a central log > server, do the logs ONLY appear on the central log server or are they > stored locally on each server and a COPY of them is sent to the central > log server? I think they only go to the syslog server though I've only configured syslog.conf in this manor *.* @syslog.host if you were do have the above in addition to the standard stuff it may go in both places.....but I doubt it. combined with syslog-ng, logrotate, and logcheck it works great. syslog-ng has the added benefit of being able to specify ports as well as use TCP. e.g systems outside my firewall log to my firewall on port 24350/tcp which is forwarded into my syslog server. nate -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
