Information: Forum is in read-only mode
For details and other support options see https://www.adiscon.com/news/support-forum-set-to-read-only-mode/

Unable to get logs from a remote host using rsyslog

Problems configuring syslog in your device or application? Turn to this group for peer discussions.

Moderator: alorbach

Google Ads


Unable to get logs from a remote host using rsyslog

Postby koteswar » Fri Aug 01, 2008 7:56 am

Hi
I am unable to get remote logs by using rsyslogd.(even normal syslogd also)
I have two PCs with Fedora Core9 connected back to back and on both rsyslog is running. On one host i am forwarding all syslogs to other host by placing following line in rsylog.conf
*.* @192.178.10.1
and ran rsyslogd at shell prompt as follows
#rsyslogd -c2 -r -f /etc/rsyslog.conf
as version 3 is not supporting -r option. But when i send syslog mssage with logger command, ARP is getting resolved and message sent to remote host 192.178.10.1 but i am getting ICMP destination unreachable saying "Admin Prohibited".
Then i added UDP port 514 in Firewall options but still same problem.
I diabled entire firewall but still same problem.

Any help will be appreciated....

Thanks in advance
Koteswar
D-Link
------------------------
yes i got the solution. We have to uncomment following line in config file
$ModLoad imudp.so # provides UDP syslog reception
$UDPServerRun 514 # start a UDP syslog server at standard port 514

to make the rsyslog to listen on this port.
By default it wont support remote logging. And -r option is not there for rsyslog version 3.
koteswar
New
 
Posts: 9
Joined: Fri Aug 01, 2008 7:23 am

Re: Unable to get logs from a remote host using rsyslog

Postby rgerhards » Fri Aug 01, 2008 12:41 pm

koteswar wrote:By default it wont support remote logging. And -r option is not there for rsyslog version 3.


Just to clarify, as you already found the solution :)

The -r option is there, but you need to specify the port (with v2 this is the same ;)). So it would be "-r514". However, it is suggested to not use compatibility mode, so your setup now is much better.

Rainer
rgerhards
Site Admin
 
Posts: 3807
Joined: Thu Feb 13, 2003 11:57 am

Google Ads



Return to Configuring Syslog

Who is online

Users browsing this forum: No registered users and 0 guests

cron