Differences

This shows you the differences between two versions of the page.

--- remote_rsyslog [2013/04/23 23:44]
kyxap создано
+++ remote_rsyslog [2013/12/15 16:32] (current)
kyxap
@@ Line 1: / Line 1: @@
-====== Настройка rsyslog для удаленного протоколирования в Debian wheezy ======
+{{tag>debian wheezy rsyslog logs}}====== Настройка rsyslog для удаленного протоколирования в Debian ======
 ==== Клиент ====
 **/etc/rsyslog.d/logclient.conf**
 <code>
-# TCP
-*.*     @@123.123.123.123:514
 # UDP
 *.*     @123.123.123.123:514
+</code>
+==== Сервер ====
+Создадим директорию для логов
+  # mkdir -p /var/log/remote/
+  # chmod 700 /var/log/remote/
+**/etc/rsyslog.d/logserver.conf**
+<code>
+# log settings for host
+# loading UDP listener module
+$ModLoad imudp
+# bind listener to specified IP
+$UDPServerAddress 123.123.123.123
+# allow remote client
+$AllowedSender UDP, 321.321.321.321
+# template for all remote clients
+$template RemoteHost,"/var/log/remote/%HOSTNAME%.log"
+# ruleset for remote clients
+$RuleSet remote
+*.* ?RemoteHost
+# applying remote ruleset to UDP listener
+$InputUDPServerBindRuleset remote
+# run listener
+$UDPServerRun 514
 </code>

SmartNote