[rsyslog-notify] Forum Thread: Re: Log forwarding - (Mode 'reply')

[noreply at adiscon.com]

User: Sheephelmet 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25328#p25328

Message: 
----------
The linux boxes sending messages to the listener box have the following
config:

# Default Settings

# Load Modules
module(load="imtcp")
module(load="omfwd")
module(load="imuxsock")

# rsyslog Templates

# rsyslog Input Modules
input(type="imtcp"
port="10514")

# rsyslog RuleSets
# Default RuleSet
action(type="omfile"
File="/var/log/messages")
action(type="omfwd"
Target="fe80::3%icm0"
Port="10514"
Protocol="tcp")

The Listener box has the following config:

# Default Settings

# Load Modules
module(load="imtcp")
module(load="imuxsock")

# rsyslog Templates

# rsyslog RuleSets

# rsyslog Input Modules
input(type="imtcp"
port="10514")

# Default RuleSet
action(type="omfile"
File="/var/log/messages")

What happens now is:

Any message produced by fe80::1/2 or 4 is passed via TCP across the
internal management connection (icm0) to be received and stored at fe80::3
A copy of the sender stations messages is also kept locally in
/var/log/messages.