Logfile monitoring for Linux Itanium 64bit

[Anon Anon]

In the middle of a trial at a prospect that has a lot of Itanimum servers. Most of them are running HP-UX for which we have a supported robot and standard system probes but they also have several Linux instances running on Itanium 64 bit. Unfortunately we don't have a robot install that supports Linux Itanium. Whilst we are able to do cpu, disk, memory and processes monitoring via RSP probe we don't have anything for doing log file monitoring on Linux Itanium.

 

Does anyone have any tested solutions for doing "remote" log file monitoring?

I am guessing that we would have to use some remote filesystem mount from a system where logmon is supported but wondered if there was another way.

 

Thanks

Ray

[Anon Anon]

You could try attacking this like SolarWinds and Nagios would; setup the logs to be pushed out through Syslog and collect them remotely via SyslogGTW and Logmon?

 

D

[Anon Anon]

Interesting idea Dustin. I've done a google search but whilst several posts mention this I haven't found anything (yet) that actually says how this is done? Do you have any doc on how to get an application log file sent via syslog?

 

Ray

[Anon Anon]

Here is a syslog.conf manpage:

 

http://manpages.ubuntu.com/manpages/hardy/man5/syslog.conf.5.html

 

To send everything to a remote host, the line in syslog.conf would look something like this:

 

*.*    192.168.1.10

 

You can use an IP address or a hostname.

 

-Keith

[Anon Anon]

Let's take a step back here to the original question.

 

I want to analyse (look for messages) in an APPLICATION log file (i.e. an ASCII file) residing on a Linux Itanium system. It is not in SYSLOG and the application does not have an option for outputting directly to SYSLOG.

 

I know how to get SYSLOG messages sent to another system where I have the sysloggtw probe (and logmon) running on a supported platform.

 

What I want to know is how can I get the application log on the Linux Itanium system to be read from the system where I have logmon running? Dustin intimated that the application log could be read by the SYSLOG daemon on the Linux Itanium system and thus could be sent to the sysloggtw running on my other server. What I need to know is how this is done i.e. how do I get SYSLOG daemon to read the application log file?

 

I think Keith's suggestion will only apply to messages already in the SYSLOG file.

 

Thanks

Ray

[Anon Anon]

The syslog daemon does not read log files. It accepts log messages from processes and directs them as configured. It is up to applications to build in support for syslog as an option.

 

There is a command that seems to exist on most Linux systems that simply sends messages to syslog. The command is logger. That is how I have seen shell scripts send messages to syslog. You could create a script that takes any messages written to that log file and sends them to the syslog daemon using the logger command.

 

-Keith

[Anon Anon]

Thanks Keith - that's the bit I was looking for.

 

Ray

[Anon Anon]

I'm with Dustin on this one. It seems like this is exactly the issue that syslog is designed to solve. Usually that is easy to setup on Linux hosts unless you want to monitor some strange aplication-specific log that does not have a syslog option.

 

-Keith