4 disabling log consolidation, 1 disabling a standalone log consolidation system, 3 disabling a standalone log forwarding client – HP Linux Server Management Software User Manual
Page 77
3.4 Disabling Log Consolidation
The clog_wizard enables log consolidation configurations but does not have an unconfigure
or deconfigure option. Thus you must disable a system from participating in log consolidation
manually, using the following instructions for each system type to:
•
Disable a standalone log consolidation system
•
Disable a Serviceguard cluster log consolidation system
•
Disable a standalone log forwarding client
•
Disable a Serviceguard log forwarding client
3.4.1 Disabling a Standalone Log Consolidation System
Perform the following steps to disable log consolidation:
1.
Stop syslog-ng:
# /etc/init.d/syslog-ng stop
2.
Edit the /etc/sysconfig/syslog-ng file, as follows:
a.
Change the CLOG_CONFIGURED line to CLOG_CONFIGURED=0.
b.
Remove all other CLOG lines except for the following:
CLOG_LAYOUTS_DIR=/var/opt/dsau/layouts
CLOG_ADDITIONAL_LOG_DIRS[0]=/var/log
3.
If the TCP protocol was used, remove the following line from /etc/services:
clog_tcp
3.4.2 Disabling a Serviceguard Cluster Log Consolidation System
Perform the following steps to disable log consolidation in a Serviceguard cluster. Perform these
steps on each cluster member:
1.
Halt the clog package with the command:
# . /etc/cmcluster.conf
# $SGSBIN/cmhaltpkg clog
2.
Stop syslog-ng with the following command:
# /etc/init.d/syslog-ng stop
(This stops the syslog-ng daemon and package log consolidation if configured.)
3.
Edit the /etc/sysconfig/syslog-ng file and change the CLOG_CONFIGURED line to
the following:
CLOG_CONFIGURED=0
Remove all other CLOG lines except for:
CLOG_LAYOUTS_DIR=/var/opt/dsau/layouts
CLOG_ADDITIONAL_LOG_DIRS[0]=/var/log
4.
Delete the clog package with the following command:
# cmdeleteconf -p clog
3.4.3 Disabling a Standalone Log Forwarding Client
Perform the following steps to disable log forwarding on a standalone client:
1.
Stop syslog-ng with the following command:
# /etc/init.d/syslog-ng stop
This stops the syslog-ng daemon and also ssh port forwarding if configured.
3.4 Disabling Log Consolidation
77