932
edits
Changes
m
*Now restart your rsyslog service
systemctl restart rsyslog.service
*Go on your VM 3 and edit /etc/rsyslog.conf and uncomment the following:
$ModLoad imtcp
$InputTCPServerRun 514
* Use the firewalld command language to open up tcp port 514 to your internal network only.
*Still on VM 3, restart rsyslog.
→Using syslog to route log files to a remote host
===Using syslog to route log files to a remote host===
*Now we will configure your machines to copy their logs to VM 3.
*Go on your VM 3 and edit /etc/rsyslog.conf and uncomment the following:
$ModLoad imtcp
$InputTCPServerRun 514
* Use the firewalld command language to open up tcp port 514 to your internal network only.
*Still on VM 3, restart rsyslog.
*On your vm1 edit /etc/rsyslog.conf and make the following change:
#*.* @@remote-host:514
*to
*.* @@192.168.x.4:514
*where x is the IP of your VM 3.
*Now restart your rsyslog service
*Now on vm1 use the logger command to verify logging messages are getting through to your Vm 3. Try this command