Syslog configuration on Solaris

On linux environment is not necessary to install a specific agent to send log to SGBox. The syslog protocol will be used.
If not already present, install rsyslog daemon.

Edit “syslog.conf” file

vi /etc/syslog.conf

Add the following row in order to send only authentication logs. Is possible use the IP or the hostname of SGBox

auth,authpriv.* @SGBox-IP

Alternatively, you can add the following row if you want send all logs to SGBox. It will be useful for a in-depth research.

*.* @SGBox-IP

Restart rsyslog deamon:

On Solaris 8 and 9 with command:
/etc/init.d/syslog stop | start

On Solaris 10 with command:
svcadm restart system/system-log