Customizing the Log Forwarder batch job to send SYSLOG data to the Data Streamer

If you want to do a one-time load of SYSLOG archive files, you can optionally run the Z Common Data Provider Log Forwarder in batch mode. This capability is particularly valuable for post-mortem analysis of a system that is not running the Log Forwarder in streaming mode.

About this task

With the Log Forwarder, you can either send data in near real-time (streaming) mode or in batch mode.

To run the Log Forwarder in streaming mode to stream z/OS® log data to the Data Streamer, see Customizing the Log Forwarder started task to collect z/OS log data.
To run the Log Forwarder in batch mode to send SYSLOG data to the Data Streamer, you must complete the following procedure to create a job for loading SYSLOG data in batch. You can create this job by using the sample job HBOLFBCH in the hlq.SHBOSAMP library, and updating the copy.

Procedure

To create the job, complete the following steps:

Copy the job HBOLFBCH in the hlq.SHBOSAMP library to a user job library.
Update the job card according to your site standards.
Update the following HBOIN DD statement.
- Replace File Path with the value of the File Path parameter that is specified when the data stream is configured in the Configuration Tool.
- Replace Data Set Name with the name of the data set that you want to collect SYSLOG data from in batch mode. File Path is the identifier of the data set.
```
//HBOIN  DD *
File Path, Data Set Name
```
You can collect SYSLOG data from multiple sources in batch mode at one time. For example,
```
//HBOIN  DD *
zOS-SYSLOG-Console_SYSLOG, ZCDP.SYSLOG1
zOS-SYSLOG-Console_SYSLOG, ZCDP.SYSLOG2
```
Update the following parameters:
/usr/lpp/IBM/zcdp/v5r1m0/LF/samples/startup.sh
Replace this value with the path where the startup.sh script is located.
The following path is the default installation path for the startup.sh script:
/usr/lpp/IBM/zcdp/v5r1m0/LF/samples/startup.sh
Change the value if a different installation path was used during the SMP/E installation.
-e
Specifies the full file path of the Log Forwarder configuration file.
```
-e /etc/cdpConfig/myPolicy.config.properties
```
-b

Specifies that run the Log Forwarder in batch mode. In the batch mode, the Log Forwarder only collects batch data streams and stops after collecting all the archived z/OS SYSLOG data sets.
Note: If you want to run the Log Forwarder in batch mode, do not delete the parameter.
Optional: If the Data Streamer is configured to bind to a specific IP address, specify the IP address of the Data Streamer by the option identifier -h. Because the Data Streamer and Log Forwarder must be running on the same LPAR, the IP address must be a valid IP address on the LPAR where the Log Forwarder runs. In the following example, the Data Streamer is configured to bind to the IP address of 9.30.243.157.
```
//STDPARM  DD *
PGM /bin/sh                                            
/usr/lpp/IBM/zcdp/v5r1m0/LF/samples/startup.sh                   
-e /etc/IBM/zcdp/LF -b -h 9.30.243.157
```
If the IP address is not specified, the Log Forwarder connects to the Data Streamer on the IP address of 127.0.0.1.