RSYSLOG

Installation

CentOS 7

sudo yum install rsyslog

Ubuntu 18.04

sudo apt install rsyslog

Configuration

Rsyslog Server

Main Configuration File

/etc/rsyslog.conf

Enable Rsyslog Reception

Uncomment the following lines from the rsyslog.conf file.

$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514

Open Required Ports

CentOS 7

sudo firewall-cmd --permanent --add-port=514/tcp
sudo firewall-cmd --permanent --add-port=514/udp
sudo firewall-cmd --reload

Ubuntu 18.04

sudo ufw allow 514/tcp
sudo ufw allow 514/udp
sudo ufw reload

Rsyslog Client

Main Configuration File

/etc/rsyslog.conf

Enable Rsyslog Sending

Add the following line to the end of the rsyslog.conf file or create a fileName.conf file in /etc/rsyslog.d/.

*.* @@ipORhostname:514