This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
remote_rsyslog [2013/04/23 23:44] kyxap создано |
remote_rsyslog [2013/12/15 16:32] (current) kyxap |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Настройка rsyslog для удаленного протоколирования в Debian wheezy ====== | + | {{tag>debian wheezy rsyslog logs}}====== Настройка rsyslog для удаленного протоколирования в Debian ====== |
==== Клиент ==== | ==== Клиент ==== | ||
+ | |||
**/etc/rsyslog.d/logclient.conf** | **/etc/rsyslog.d/logclient.conf** | ||
<code> | <code> | ||
- | # TCP | ||
- | *.* @@123.123.123.123:514 | ||
# UDP | # UDP | ||
*.* @123.123.123.123:514 | *.* @123.123.123.123:514 | ||
+ | </code> | ||
+ | |||
+ | ==== Сервер ==== | ||
+ | Создадим директорию для логов | ||
+ | # mkdir -p /var/log/remote/ | ||
+ | # chmod 700 /var/log/remote/ | ||
+ | |||
+ | **/etc/rsyslog.d/logserver.conf** | ||
+ | <code> | ||
+ | # log settings for host | ||
+ | |||
+ | # loading UDP listener module | ||
+ | $ModLoad imudp | ||
+ | |||
+ | # bind listener to specified IP | ||
+ | $UDPServerAddress 123.123.123.123 | ||
+ | |||
+ | # allow remote client | ||
+ | $AllowedSender UDP, 321.321.321.321 | ||
+ | |||
+ | # template for all remote clients | ||
+ | $template RemoteHost,"/var/log/remote/%HOSTNAME%.log" | ||
+ | |||
+ | # ruleset for remote clients | ||
+ | $RuleSet remote | ||
+ | *.* ?RemoteHost | ||
+ | |||
+ | # applying remote ruleset to UDP listener | ||
+ | $InputUDPServerBindRuleset remote | ||
+ | |||
+ | # run listener | ||
+ | $UDPServerRun 514 | ||
</code> | </code> |