Installing rsyslog from yum repository

<yambe:breadcrumb self="Installing rsyslog from yum repository">Rsyslog configuration</yambe:breadcrumb>

Installing rsyslog server in CentOS

Configure rsyslog server

To install rsyslog use following steps:

1. yum -y install rsyslog
2. Disable SELinux
3. Enable incoming UDP port 514 packets
4. Edit '/etc/rsyslog.conf' file as follows:
   1. Append following lines

      $template TmplAuth, "/var/log/%HOSTNAME%/%PROGRAMNAME%.log"
      
      authpriv.*      ?TmplAuth
      *.info,mail.none,authpriv.none,cron.none   ?TmplAuth
      

   2. Uncomment following lines:

      $ModLoad imudp
      $UDPServerRun 514

5. service rsyslog start
6. chkconfig rsyslog on

Configure rsyslog client

After configuring rsyslog server, configure remote machines to send logs to rsyslog server using:

1. Install rsyslog same as in case of server
2. Edit '/etc/rsyslog.conf' file and append following configuration:

   *.* @<server>:<port>

3. service rsyslog start
4. chkconfig rsyslog on

Steps learned from http://tecadmin.net/setup-centralized-logging-server-using-rsyslogd/ and contributed by Kiran Kollipara <yambe:breadcrumb self="Installing from source">Rsyslog configuration</yambe:breadcrumb>