Knowledge Base
Authentication is disabled (development mode).

syslog messages from/to remote host

Edit

log logging remote syslog

## On server host using rsyslog:

cat <<"EOF" > /etc/rsyslog.d/remote.conf
# provides UDP syslog reception
module(load="imudp")
input(type="imudp" port="514")

# provides TCP syslog reception
module(load="imtcp")
input(type="imtcp" port="514")

$AllowedSender UDP, 192.168.0.100/32
$AllowedSender TCP, 192.168.0.100/32

$EscapecontrolCharactersOnReceive off

$template LogFormat,"[%timegenerated:::date-rfc3339%] %syslogtag% %msg%
"
$template RemoteLogs,"/var/log/remote/%HOSTNAME%/%PROGRAMNAME%"

if $fromhost-ip startswith '192.168.0.100' then {
if $hostname == 'yukon' then {
#?:source, isequal, "localhost" ~
*.* ?RemoteLogs;LogFormat
}
EOF

## On client using syslog.ng:

cat <<"EOF" > /etc/syslog-ng/conf.d/commgr-remote.conf
log { source(s_src); filter(f_commgr); destination(d_net); };
EOF