Forwarding syslog to a remote central server on Rocky Linux 8
This KB describes how to forward syslog traffic on Rocky Linux 8 ( Swarm Cluster Services )
If you want to forward syslog traffic to a remote syslog server please execute the following steps:
in /etc/rsyslog.conf just uncomment the last line that says
#*.* @remote-host:514
replace remote-host with your remote centralized logging server ip/hostname
if its TCP then its @@ if its UDP syslog then its single @
Not everything needs to be forwarded, it depends on what you need, the following are the syslog facilities we currently map to on our SCS ( Swarm Cluster Services )
local0.* /var/log/datacore/elasticsearch.log
local1.* /var/log/datacore/haproxy.log
local3.* /var/log/datacore/platform.log
local4.* /var/log/datacore/cloudgateway_audit.log
local5.* /var/log/datacore/cloudgateway_server.log
local6.* /var/log/datacore/castor.log
Related content
© DataCore Software Corporation. · https://www.datacore.com · All rights reserved.