Edit the /etc/rsyslog.conf file and uncomment the following lines at the end of the file where remote-host is the name of the syslog server:
#$WorkDirectory /var/lib/rsyslog #$ActionQueueFileName fwdRule1 #$ActionQueueMaxDiskSpace 1g #$ActionQueueSaveOnShutdown on #$ActionQueueType LinkedList #$ActionResumeRetryCount -1 #*.* @@remote-host:514
Restart the syslog service:
# service rsyslog restart
After setting up the syslog server, test the configuration:
# logger -p local0.notice -t TEST "Test"
On the syslog server, check the TEST string in the /var/log/messages file:
# grep "TEST" /var/log/messages
Leave a Reply
You must be logged in to post a comment.