Configure Remote Logging with Rsyslog
Configure Remote Logging with Rsyslog Introduction A Linux host running rsyslog can send all or individual logs to another rsyslog host over a TCP or UDP connection. This is necessary to preserve the integrity of the log files if the host is ever compromised or provide a centralized location for managing the log files. Requirements Red Hat Enterprise Linux (RHEL) or Debian based distributions (CentOS, Fedora, Ubuntu, etc) Logging server node Logging client node Install Rsyslog Rsyslog will already likely be installed on most popular distributions. In the event rsyslog is missing, it can be install with YUM on CentOS and RHEL. yum -y install rsyslog Or rsyslog can be installed on Ubuntu or Debian with apt-get . apt-get -y install rsyslog Configure Logging Server First log into the rsyslog host that will receiving the logs. Edit the /etc/rsyslog.conf file and uncomment the two lines relating to th...