MonitorWare Knowledge Base

by **koteswar** on Fri Aug 01, 2008 7:56 am

Hi
I am unable to get remote logs by using rsyslogd.(even normal syslogd also)
I have two PCs with Fedora Core9 connected back to back and on both rsyslog is running. On one host i am forwarding all syslogs to other host by placing following line in rsylog.conf
*.* @192.178.10.1
and ran rsyslogd at shell prompt as follows
#rsyslogd -c2 -r -f /etc/rsyslog.conf
as version 3 is not supporting -r option. But when i send syslog mssage with logger command, ARP is getting resolved and message sent to remote host 192.178.10.1 but i am getting ICMP destination unreachable saying "Admin Prohibited".
Then i added UDP port 514 in Firewall options but still same problem.
I diabled entire firewall but still same problem.

Any help will be appreciated....

Thanks in advance
Koteswar
D-Link
------------------------
yes i got the solution. We have to uncomment following line in config file
$ModLoad imudp.so # provides UDP syslog reception
$UDPServerRun 514 # start a UDP syslog server at standard port 514

to make the rsyslog to listen on this port.
By default it wont support remote logging. And -r option is not there for rsyslog version 3.

by **rgerhards** on Fri Aug 01, 2008 12:41 pm

koteswar wrote:By default it wont support remote logging. And -r option is not there for rsyslog version 3.

Just to clarify, as you already found the solution

The -r option is there, but you need to specify the port (with v2 this is the same

). So it would be "-r514". However, it is suggested to not use compatibility mode, so your setup now is much better.

Rainer

MonitorWare Knowledge Base

Unable to get logs from a remote host using rsyslog

Unable to get logs from a remote host using rsyslog

Re: Unable to get logs from a remote host using rsyslog

Google Ads

Who is online