Remote logging with syslog

Today i played around with syslogd and here is what I learned:

To enable syslog to recieve logs from remote machines you have to give the syslogd an -r parameter. I Debian you have edit /etc/inet.d/syslogd to enable remote logging. A bug has allready been filed about this #205239

On other systems like RedHat you can configure it in /etc/sysconfig/syslog where you set SYSLOGD_PARAMS=”-r”

Now restart syslog with:

machine:~# /etc/init.d/sysklogd restart

To configure the clients edit /etc/syslog.conf:

#Remote logging to 10.0.0.5
*.* @10.0.0.5

And restart syslog like above (now on you client).

NOTE - You can only have comments on newlines. This example is WRONG!!

*.* @10.0.0.5 #My log machine<
Creative Commons License
Remote logging with syslog by Jacob Emcken is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.