At 17:32 9/05/02 -0600, Vilmos Branyik wrote:

>I have a Max 4048 that is rebooting itself and I'm attempting to set up
>logging but can't seem to get it to work. I think my set up in the max is
>right but was hoping someone on the list would point out any mistake I've
>made.
>
>Here are the settings on my Max:
>
>Syslog=Yes
>Log Host = 10.0.0.145
>Log Port = 514
>Log Facility = Local0
>Log Software Version = No
>Log CallInfo = EndOfCall
>
>On my Linux box in the syslog.conf I added the following line:
>
>Local0.*           /var/log/MAX
>
>I restarted my syslog which created the MAX file in the log directory but
>nothing is appears to be getting to it. I checked my messages file and can't
>seem to find anything in it that helps. I also tried with the CallInfo set
>to None.
>
>Syslog is running because it's logging everything else.
>
>Can anyone point me in the right direction?

What linux distribution are you running ? Most don't enable "remote
reception" for syslogd by default. Check your /var/log/messages for the
last time you restarted syslogd, and make sure it says something like
"syslogd 1.3-3: restart (remote reception)."

If it doesn't find the script that launches syslogd (on redhat its
/etc/rc.d/init.d/syslog) and edit it to add the -r command line option when
syslogd is started, then stop and restart syslog.

You probably also want to firewall port 514 udp used by syslog so that only
the hosts you want sending to your server can. Otherwise any joe bloggs can
send stuff to your syslog server :) (Which is the reason remote reception
isnt enabled by default I suppose)

Regards,
Simon