MonitorWare Knowledge Base

Hi,

can the rsyslogd simoultaneously write the log messages both to a remote host and to a standard syslog.log logfile on local disc?

regards - Mikael

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Indeed, it can. You can configure as many different actions as you like.

Rainer

Nice!

Is this threaded, or is it done sequentially? If sequentially, which is done first?

regards - Mikael

It is done sequentially. All rules are carried out sequentially in order of appearance in the configuration file. Please note that with 1.12.0 (and above), rsyslogd has decoupled the receiver and the action configuration. So blocking actions do not have any direct impact on the ability to receive messages.

Rainer

Ok,

I'm new to rsyslogd so I need a bit more explanation...
Your answer means that the order doesn't really matter, I can choose which ever?

My concern, (being a bit paranoid ), is that I want to be so sure I possible can be, that the log messages are forwarded to the remote host without the possibility of being tampered with.

regards - Mikael