Sending Messages to a Remote Syslog Server next up previous contents
Next: Config Statements Up: Some Core Recipies Previous: Important   Contents


Sending Messages to a Remote Syslog Server

In this recipe, we forward messages from one system to another one. This is used in a number of cases:
  • the local system does not store any messages (e.g. has not sufficient space to do so)
  • there is a (e.g. legal) requirement to consolidate all logs on a single system
  • the server may run some advanced alerting rules, and needs to have a full picture or network activity to work well
  • ...
In our case, we forward all messages to the remote system. Note that by applying different filters, you may only forward select entries to the remote system. Also note that you can include as many forwarding actions as you like. For example, if you need to have a backup central server, you can simply forward to both of them, using two different forwarding lines.

To learn how to configure the remote server, see recipe 2.1.3.


Subsections
Rainer Gerhards 2010-02-23