Re: Sending syslog to another machine

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Bill Davidsen wrote:
Mikkel L. Ellertson wrote:
lanas wrote:
Basically rsyslog works like syslog, but adds a few more options.  So
simply specify the server (and optional port) to start with and make a
few tests by using the logger utility. *.* @@remote-host:514

Replace remote-host with your remote syslog.  514 is the default
well-known syslog port so unless you have set up something else, you
can leave it there.

Don't forget to restart/reload rsyslog (or any other syslog daemon for
that matter) after doing configuration changes.  This sometimes can be
done by simply sending the daemon a HUP signal:

killall -HUP daemon

or by restarting it altogether:

/etc/init.d/daemon restart

Hope this helps.
Don't forget to configure the host you are logging to so that it
will accept logging from an outside machine. By default, it probably
doesn't.

Don't know about the syslog daemon, but it looks as if the firewall rules don't. The good think about using a syslog machine is that the *times* match, the bad thing is that it's a single point of failure, and network connected as well. So for debugging network issues it's suboptimal. ;-)

By default, most firewalls don't permit syslog, so you have to open
UDP port 514 on the receiving machine.

Also, both the old syslogd and the newer rsyslogd have to have the "-r"
option specified for them to actually listen to the network (the "-r"
can also have a port number appended, e.g. "-r 514").  Not sure about
ng-syslog, but I suspect the same is true.

On Red Hattish machines, options are passed to the syslog daemon by
values stuffed into the "SYSLOGD_OPTIONS" line of either the
"/etc/sysconfig/syslog" or "/etc/sysconfig/rsyslog" file (depending on
which syslog daemon you're running.  By default, you'll find

	SYSLOGD_OPTIONS="-c 3" (/etc/sysconfig/rsyslog)
	SYSLOGD_OPTIONS="-m 0" (/etc/sysconfig/syslog)

Prepend that with "-r" (e.g. SYSLOGD_OPTIONS="-r -c 3") and then do a
"service syslog restart".  It should start listening to the network.
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer                      ricks@xxxxxxxx -
- AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
-                                                                    -
-                       When in doubt, mumble.                       -
----------------------------------------------------------------------

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux