MonitorWare Knowledge Base

Hi!
I have successfully compiled rsyslog on centos5. Unfortunately it does not bind to udp and accepting remote messages.

Does anybody have an idea how to solve it?

enclosed is my rsyslog.conf

$ModLoad immark.so # provides --MARK-- message capability
$ModLoad imudp.so # provides UDP syslog reception
$ModLoad imtcp.so # provides TCP syslog reception and GSS-API (if compiled to support it)
$ModLoad imuxsock.so # provides support for local system logging (e.g. via logger command)
$ModLoad imklog.so # provides kernel logging support (previously done by rklogd)
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
kern.* /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
#*.info;mail.none;authpriv.none;cron.none /var/log/messages

# The authpriv file has restricted access.
#authpriv.* /var/log/secure

# Log all the mail messages in one place.
#mail.* -/var/log/maillog

# Log cron stuff
#cron.* /var/log/cron

# Everybody gets emergency messages
#*.emerg *

# Save news errors of level crit and higher in a special file.
#uucp,news.crit /var/log/spooler

# Save boot messages also to boot.log
#local7.* /var/log/boot.log
*.* /var/log/all.log

please run it interactively in debug mode (-d -n) and provide the output.

oops... lol, I guess we overlooked the same thing: you need to not just load the plugin but also run the input. This is missing:

$UDPServerRun 514

where 514 can be any port of your linking (but 514 is typically used).

Rainer