<yambe:breadcrumb>Suse|Suse</yambe:breadcrumb>

Install rsyslog on Suse 12 SP2

To install rsyslog on Suse 12 SP2 use:

zypper in rsyslog
vim /etc/rsyslog.d/remote.conf
Uncomment $ModLoad imudp.so and $UDPServerRun 514
rcsyslog restart
netstat -alnp | grep 514
Edit /etc/rsyslog.conf and client specific configuration such as:
```
if $fromhost-ip startswith '10.4.4.54' then /var/log/netlog/10.4.4.54.log
& ~
```
after all modules are loaded, before kernel, etc. logs are sent elsewhere.
Create /var/log/netlog folder
rcsyslog restart
Test by forwarding logs to rsyslog server

Refer:

Anonymous