Setting up a Logging Server

Summary

This is to setup a logging server to capture logs from any servers on your network.

Configuration

You will need to edit the file "/etc/rsyslog.conf"

Editing the file

vi /etc/rsyslog.comconf

You will need to change to the following to allow port 514 to be open

# Provides UDP syslog reception

# for parameters see http://www.rsyslog.com/doc/imudp.html

module(load="imudp") # needs to be done just once

input(type="imudp" port="514")


# Provides TCP syslog reception

# for parameters see http://www.rsyslog.com/doc/imtcp.html

module(load="imtcp") # needs to be done just once

input(type="imtcp" port="514")

Then simply restart the rsyslog deamon

systemctl restart rsyslog