[rsyslog-notify] Forum Thread: Re: Syslog forward logs to Rsyslog centralize - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Wed Feb 19 12:42:39 CET 2014
User: dlang
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24242#p24242
Message:
----------
well, you don't show any output config on the central server that I am
seeing, but the config to receive logs looks good
minor detail, you shoudln't need the line
$UDPServerAddress * # all local interfaces
by default rsyslog will listen to logs from anywhere, this parameter is to
let you restrict that.
the standard things to check when you don't get remote logs is to
double-check your iptables rules to make sure that they aren't blocking it,
and to run tcpdump to make sure the logs are really arriving like you think
they are. If you don't see them arriving with tcpdump, check that they are
being sent as expected with tcpdump on the sender. Also check iptables on
the sender and that there aren't any firewalls between the sender and
receive that could be blocking them
could you check these items?
More information about the rsyslog-notify
mailing list