[rsyslog] Logging all messages from a remote server

Julian Yap julianokyap at gmail.com
Mon Mar 16 05:32:14 CET 2009


I'm having trouble logging ALL the syslog messages received from a
server.  I'm not sure if it's because it's from a non-standard piece
of hardware (ie. not a Linux server).  Logging to another server
running syslogd works fine (but syslogd doesn't allow me to log
messages from a remote server to a separate file and it's not my
central syslogd server).

I've tried several lines but none seem to work for me:
if $fromhost == 'server' then /var/log/remote/server/all
if $source == 'server' then /var/log/remote/server/all
:FROMHOST, isequal, "server" /var/log/remote/server/all
if $fromhost == 'server.domain.com' then /var/log/remote/server/all
if $fromhost-ip == '192.168.0.60' then /var/log/remote/server/all


.. Running Rsyslog 3.21.10.

Thanks,
Julian



More information about the rsyslog mailing list