How do I monitor rsyslog on the 7.1 UNIX Agent? (NETIQKB72784)

  • Document ID:7772784
  • Creation Date:28-Jan-2011
  • Modified Date:06-May-2011
    • Micro Focus Products:
      AppManager

Environment

Effected Products:

  • RedHat Enterprise Linux 6
  • Oracle Linux 6
  • CentOS 6

7.1 NetIQ UNIX Agent components currently fixed in Hotfix 72755:

  • AppManager UNIX
    • UNIX_Syslog knowledge script

7.1 NetIQ UNIX Agent components needing syslog.conf symlink:

  • AppManager UNIX(If Hotfix 72755 is not applied)
    • UNIX_Syslog knowledge script
  • Security Manager
    • UNIX Log Archivial
  • Secure Configuration Manager
    • UNIX syslog related security checks

Situation

How do I monitor rsyslog on the 7.1 UNIX Agent?

Resolution

For the moment, to monitor rsyslog within the 7.1 UNIX Agent for the product components effected, please create a symlink of /etc/syslog.conf -> /etc/rsyslog.conf

  • ln -s /etc/rsyslog.conf  /etc/syslog.conf

This will not cover all the new rsyslog syntax features, but if a basic or stock rsyslog.conf is present this should get syslog monitoring for the moment until a more permanent solution is available.

Cause

RedHat Enterprise 6, (and thus all derivatives) moved to using rsyslog instead of the standard syslog facility.

Additional Information

Formerly known as NETIQKB72784

For additional information, please contact NetIQ Technical Support.