MonitorWare Knowledge Base

Hello,

I've recently upgraded to Debian 5 for a couple of our servers and am interested in using the remote logging features found in rsyslog. However, I also want to keep the local logging enabled too. How can I configure the system to log locally and remotely simultaneously? Also, I'm only interested in remote logging for mail.log for two servers into one file on the logging server.

Is this all possible at the same time? Or will I witness a huge performance hit on dual looging such as this?

Any help is most appreciated.

Thanks

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

That's a very typical configuration, you won't get any noticable performance hit if you do not send tenthousands of messages per second.

Just add a forwarding action, as with any other of the actions, eg. in this way

mail.info @@server.example.net

For the receiving side there are a number of detailled howto guides in the doc and if you have not installed that, on the rsyslog web site in the doc area (but they are for the most recent version, just so that you know).

Thank you for the swift reply. I'll give it a go and come back if there I meet with any problems.

Cheers