Configuring rsyslog to accept remote log and log to separate files
rsyslog.conf
$ModLoad imudp
$ModLoad imtcp
# Define template to log remote entries by hostname:
$template RemoteHost,"/var/log/remote/%HOSTNAME%/messages"
# Define remote logging ruleset
$RuleSet remote
*.* ?RemoteHost
# bind ruleset to tcp & udp listener
$InputTCPServerBindRuleset remote
$InputTCPServerRun 10514
$InputUDPServerBindRuleset remote
$UDPServerRun 514
$ModLoad imtcp
# Define template to log remote entries by hostname:
$template RemoteHost,"/var/log/remote/%HOSTNAME%/messages"
# Define remote logging ruleset
$RuleSet remote
*.* ?RemoteHost
# bind ruleset to tcp & udp listener
$InputTCPServerBindRuleset remote
$InputTCPServerRun 10514
$InputUDPServerBindRuleset remote
$UDPServerRun 514
There are no comments on this page. [Add comment]