clog_wizard.1m (2012 03)

c
clog_wizard(1M) clog_wizard(1M)
NAME
clog_wizard - Helps set up log-consolidation servers and clients. clog_wizard is part of the Distributed
Systems Administration Utilities (DSAU).
SYNOPSIS
Path: /opt/dsau/sbin/clog_wizard
clog_wizard [{-f | --file } inputfile]
clog_wizard { -h | -- help | -?}
clog_wizard { -V | --version }
DESCRIPTION
The Consolidated Logging Wizard helps the administrator configure log-consolidation servers and log-
forwarding clients. It is part of the Distributed Systems Administration Utilities (DSAU).
Centralized log consolidation provides benefits such as:
• Easier log file analysis
• Increased security
• Simplified archiving of logs
Standard syslogd(1M) offers UDP-based log forwarding to a central log-consolidation server. DSAU uses
the open source tool "syslog next-generation" (syslog-ng) to perform log consolidation. syslog-ng offers
several critical features missing from the standard syslogd:
• Improved filtering features
• TCP transport with optional ssh port forwarding for encrypting all forwarded log data
• Log rotation based on template output filenames
• Launching programs in response to log messages triggers
• Ability to forward additional text-based log files
Configuration Overview:
The wizard supports setting up the following log-consolidation configurations:
Log-consolidation server configurations:
• Standalone server acting as a log consolidator
Remote clients forward syslog entries to this system using UDP, TCP, or TCP with SSH. The
remote clients can be standalone systems or Serviceguard cluster members. For Serviceguard
clusters, the member-specific package logs can be forwarded and consolidated with one consoli-
dated log per package.
• Serviceguard cluster intra-cluster consolidation
When using Serviceguard clusters, the cluster can be configured to consolidate the per-member
syslogs and the per-member package logs for the cluster. This consolidation is offered as a highly
available service (clog package) for use by the other cluster members. Intra-cluster log consoli-
dation can offer simplified package monitoring and problem diagnosis.
• Serviceguard cluster highly-available log consolidator
Log consolidation is configured as a Serviceguard package. The cluster acts as a highly available
log consolidation server for a set of remote clients. The remote clients can include standalone
systems or other Serviceguard clusters. Optionally, the members of the cluster can choose to
consolidate their local logs with the other consolidated logs.
Log-forwarding client configurations:
• Standalone system
The system can be configured to forward syslogs to a remote consolidation server.
• Serviceguard cluster
The cluster can be configured to forward syslog and package logs to a remote consolidation
server.
HP-UX 11i Version 3: March 2012 − 1 − Hewlett-Packard Company 1