Configuring service on Linux/AIX

Edit online

About this task

Follow these steps to configure the remote syslog configuration file on Linux®/AIX®. You can use this configuration to capture information from csmMessage.log file.
Note: The following commands are meant for Unix system, which might differ for different level of Linux and remote syslog server.

Procedure

  1. Set up rsyslog.conf to forward message to a remote server.
    1. Open the rsyslog.conf in edit mode.
      edit /etc/rsyslog.conf
    2. The rsyslog.conf has several examples. Find and edit, or add the action that forwards the logs to a remote syslog server. The target is the IP(hostname) for the remote syslog server and the port is the communication port that is configured to receive the logs.
      For example:
      *.* action(type="omfwd" target="192.0.2.2" port="10514" protocol="tcp" action.resumeRetryCount="100" queue.type="linkedList" queue.size="10000")
      This action decouples the message sending from other logging actions, and prevent delays when the remote system is not reachable. In addition, it tries to connect 100 times before it discards message as undeliverable.
  2. Modify rsyslog.conf to monitor csmMessage.log.
    1. Load the imfile module at the beginning of remote syslog configuration file. This module monitors the file.
      module(load="imfile" PollingInterval="10")
      Note: All modules are to be loaded once. Polling Interval is a module directive, which must be set while you load the module.
    2. Configure input and its parameters. This input is used by the imfile module to indicate which file to monitor. Set the input to monitor file:
      /opt/IBM/CSM/liberty/wlp/usr/servers/csmServer/logs/CSM/csmMessage.log
      input(type="imfile" File="/opt/IBM/CSM/liberty/wlp/usr/servers/csmServer/logs/CSM/csmMessage.log" Tag="csmMessage")
  3. Start and restart syslog.
    Example for starting and stopping on some Linux platforms. For more information, view the remote syslog documentation for the specified level and platform.
    systemctl stop rsyslog
    systemctl start rsyslog

Results

The remote syslog server now sends all the incoming Copy Services Manager messages to the external syslog server.