Installing rsyslog from yum repository

Configuring rsyslog server in CentOS

To install rsyslog server in CentOS from source follow these steps:

• Download latest stable release of rsyslog from http://www.rsyslog.com/
• Extract the source package
• Run configure in following manner

  ./configure --enable-gnutls --libdir=/lib --sbindir=/sbin

• Run make
• Run make install as root
• Use rsyslog.conf file similar to rsyslog-2009-10-06.conf.txt
• Use following commands to use rsyslog instead of syslog

  service syslog stop
  service rsyslog start
  chkconfig syslog off
  chkconfig rsyslog on

Troubleshooting

If you get errors like this

Oct 26 15:34:29 information rsyslogd:the last error occured in /etc/rsyslog.conf, line 8
Oct 26 15:34:29 information rsyslogd:could not load module '/usr/local/lib/rsyslog/imklog.so', dlopen: /usr/local/lib/rsyslog/imklog.so: undefined symbol: MsgSetRcvFromIP
Oct 26 15:34:29 information rsyslogd:the last error occured in /etc/rsyslog.conf, line 9
Oct 26 15:34:29 information rsyslogd:could not load module '/usr/local/lib/rsyslog/imudp.so', dlopen: /usr/local/lib/rsyslog/imudp.so: undefined symbol: MsgSetRcvFromIP
Oct 26 15:34:29 information rsyslogd:the last error occured in /etc/rsyslog.conf, line 13
Oct 26 15:34:29 information rsyslogd:invalid or yet-unknown config file command - have you forgotten to load a module?
Oct 26 15:34:29 information rsyslogd:the last error occured in /etc/rsyslog.conf, line 14
Oct 26 15:34:29 information rsyslogd:invalid or yet-unknown config file command - have you forgotten to load a module?
Oct 26 15:34:29 information rsyslogd:the last error occured in /etc/rsyslog.conf, line 24
Oct 26 15:34:29 information kernel: rklogd 2.0.6, log source = /proc/kmsg started.

in `/var/log/messages' file after doing `service rsyslog restart' then probably you are not running rsyslog version you installed from source. Make sure you use `--libdir=/lib --sbindir=/sbin' with `./configure' so that already installed rsyslog is replaced.

Back to Rsyslog configuration