Installing rsyslog from yum repository

<yambe:breadcrumb self="Installing from source">Rsyslog configuration</yambe:breadcrumb>

Installing rsyslog server in CentOS

Configure rsyslog server

To install rsyslog use following steps:

1. Setup repositories rpmfusion, rpmforge and epel
2. yum -y install rsyslog
3. Disable SELinux
4. Enable incoming UDP port 514 packets
5. Edit '/etc/rsyslog.conf' file as follows:
   1. Append following lines

      $template TmplAuth, "/var/log/%HOSTNAME%/%PROGRAMNAME%.log"
      
      authpriv.*      ?TmplAuth
      .info,mail.none,authpriv.none,cron.none   ?TmplMsg
      

   2. Uncomment following lines:

      $ModLoad imudp
      $UDPServerRun 514

6. service rsyslog start
7. chkconfig rsyslog on

Configure rsyslog client

After configuring rsyslog server, configure remote machines to send logs to rsyslog server using:

1. Install rsyslog same as in case of server
2. Edit '/etc/rsyslog.conf' file and append following configuration:

   *.* @<server>:<port>

3. service rsyslog start
4. chkconfig rsyslog on

Steps learned from http://tecadmin.net/setup-centralized-logging-server-using-rsyslogd/ and contributed by Kiran Kollipara <yambe:breadcrumb self="Installing from source">Rsyslog configuration</yambe:breadcrumb>