[rsyslog] [basic] No remote logs getting thru

[Harry Putnam]

"Rainer Gerhards" <rgerhards at hq.adiscon.com> writes:

>> Maybe the sample configuration files are for an earlier release of
>> rsyslog.
>
> Harry, 
>
> please do me a favor and complain with your distribution - they probably have
> simply overlooked this (can easily happen). I have just checked, the sample
> rsyslog.conf I provide includes commented-out remote reception commands (for
> a reason ;)):
>
> http://git.adiscon.com/?p=rsyslog.git;a=blob;f=rsyslog.conf;h=47fc4402a174367
> e332a3815b3eb0b627db60b3c;hb=HEAD#l52

Thanks for showing that... and for a moment there I was afraid I was
the dope that had somehow deleted the important missing lines.  So
just to make sure I checked my distros' (gentoo) rsyslog.conf shipped
for installation by the distro maintainer and sure enough they have:

  # ######### Receiving Messages from Remote Hosts ########## 
  # TCP Syslog Server:
  # provides TCP syslog reception and GSS-API (if compiled to support it)
  #$ModLoad imtcp.so  # load module
  # Note: as of now, you need to use the -t command line option to
  # enable TCP reception (e.g. -t514 to run a server at port 514/tcp)
  # This will change in later v3 releases.
  
  # UDP Syslog Server:
  #$ModLoad imudp.so  # provides UDP syslog reception
  #$UDPServerRun 514 # start a UDP syslog server at standard port 514
   
When the original shipped with rsyslog pkg has the lines below as
you've shown.

 # ######### Receiving Messages from Remote Hosts ########## 
 # TCP Syslog Server:
 # provides TCP syslog reception and GSS-API (if compiled to support it)
 #$ModLoad imtcp.so  # load module
 #$InputTCPServerRun 514 # start up TCP listener at port 514
 
 # UDP Syslog Server:
 #$ModLoad imudp.so  # provides UDP syslog reception
 #$UDPServerRun 514 # start a UDP syslog server at standard port 514

Apparently my distro has removed that one all important line.

 `#$InputTCPServerRun 514 # start up TCP listener at port 514'

And yes, I will make sure to contact the package maintainer about it.
Thanks for the heads up and I'm sure the maintainer will want to get
that back in there too.

> Also, I have added some text to the rsyslog cookbook for remote reception. I
> would appreciate if you could have a look and let me know if it is useful. If
> not, some text suggestions would be most welcome:
>
> http://cookbook.rsyslog.com/node16.html
>

Thanks... that couldn't be more clear... brief and directly on point. 
Thanks.