Difference between revisions of "/etc/rsyslog.conf"
Jump to navigation
Jump to search
(Created page with "cat /etc/rsyslog.conf | grep -v "#" | grep . module(load="imklog" permitnonkernelfacility="on") $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat $RepeatedMsgReduct...") |
|||
| (2 intermediate revisions by one other user not shown) | |||
| Line 1: | Line 1: | ||
| − | cat /etc/rsyslog.conf | grep -v "#" | grep . | + | *<code>cat /etc/rsyslog.conf | grep -v "#" | grep .</code> |
module(load="imklog" permitnonkernelfacility="on") | module(load="imklog" permitnonkernelfacility="on") | ||
| Line 13: | Line 13: | ||
$WorkDirectory /var/spool/rsyslog | $WorkDirectory /var/spool/rsyslog | ||
$IncludeConfig /etc/rsyslog.d/*.conf | $IncludeConfig /etc/rsyslog.d/*.conf | ||
| + | |||
| + | |||
| + | == Configure remote log support == | ||
| + | # provides UDP syslog reception | ||
| + | module(load="imudp") | ||
| + | input(type="imudp" port="514") | ||
| + | |||
| + | # provides TCP syslog reception | ||
| + | module(load="imtcp") | ||
| + | input(type="imtcp" port="514") | ||
| + | |||
| + | if $fromhost-ip == '10.10.xx.xx' then { | ||
| + | /var/log/your_filename.log | ||
| + | stop | ||
| + | } | ||
| + | |||
== See also == | == See also == | ||
* {{syslog}} | * {{syslog}} | ||
| + | |||
| + | [[Category:Computing]] | ||
Latest revision as of 14:36, 26 September 2021
cat /etc/rsyslog.conf | grep -v "#" | grep .
module(load="imklog" permitnonkernelfacility="on") $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat $RepeatedMsgReduction on $FileOwner syslog $FileGroup adm $FileCreateMode 0640 $DirCreateMode 0755 $Umask 0022 $PrivDropToUser syslog $PrivDropToGroup syslog $WorkDirectory /var/spool/rsyslog $IncludeConfig /etc/rsyslog.d/*.conf
Configure remote log support[edit]
# provides UDP syslog reception module(load="imudp") input(type="imudp" port="514")
# provides TCP syslog reception module(load="imtcp") input(type="imtcp" port="514")
if $fromhost-ip == '10.10.xx.xx' then {
/var/log/your_filename.log
stop
}
See also[edit]
Advertising:
