Help with syslog

[reed]

On Thu, 21 Jun 2007, der.hans wrote:

> Is your syslog server listening for external syslog entries?
> 
> # For remote UDP logging use SYSLOGD="-r"
> 
> That's in /etc/default/syslogd on my box.
> 
> If you've got the -r set, you might want to verify that syslog is
> listening to UDP port 514 on eth0.
> 
> After that make sure you don't have any firewall rules preventing
> receiving the packets.
> 
> If all of that is good use tcpdump/wireshark/etc. on the client box to
> investigate the packets being sent.

In addition to that, on the local system use "logger" to test that you can 
send log messages to each of your new log files. Like:

logger -p local3.info testing

  Jeremy C. Reed