MonitorWare Knowledge Base

Hi,

I'm fairly new to centralized logging and we're using centos 5 in our enterprise.

I would like to try out rsyslog for many reasons. the most important being that it's included in the default repos for centos.

Part of our requirements also include setting up a few proxy servers in various parts of our network to accept messages and then forward them to the rsyslog server. is this possible?

Also, does rsyslog accept messages from syslog itself without having to configure or install rsyslog on each client? my understanding is that syslog can do this (at least for syslog-ng) but i'm not 100% sure on this

thanks for the clarifications.

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Yes. This is possible.
there is no need to deploy rsyslog in every client you use. Native Syslog is capable of sending messages to rsyslog server(centralized), but you will not be having the facility to use some features like 'Sending logs using RELP ' and some others.

This link may also be useful in the rsyslog-to-rsyslog case:

http://www.rsyslog.com/doc-rsyslog_reli ... rding.html

Please note that in syslog speak, a "proxy" is usually called a "relay". So it may help greatly if you look up the doc for relay scenarios.

HTH
Rainer