2012-12-20, 20:40
This minimal how-to assumes Debian/Ubuntu Linux distributions, and that rsyslog is installed. I'm sure the principle can be applied across distributions.
Server
Uncomment these lines in /etc/rsyslog.conf
Then /etc/init.d/rsyslog restart
Client
Add these lines to the MODULES section in /etc/rsyslog.conf
Then /etc/init.d/rsyslog restart
External reference: http://www.howtoforge.com/centralized-rs...monitoring
Server
Uncomment these lines in /etc/rsyslog.conf
Code:
$ModLoad imtcp
$InputTCPServerRun 514
Then /etc/init.d/rsyslog restart
Client
Add these lines to the MODULES section in /etc/rsyslog.conf
Code:
$WorkDirectory /rsyslog/work # default location for work (spool) files
$ActionQueueType LinkedList # use asynchronous processing
$ActionQueueFileName srvrfwd # set file name, also enables disk mode
$ActionResumeRetryCount -1 # infinite retries on insert failure
$ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
*.* @@<server-ip-address>
Then /etc/init.d/rsyslog restart
External reference: http://www.howtoforge.com/centralized-rs...monitoring