Blog

2009/07/20

Rsyslog need to receive Syslog

On my router I have syslog running. I transfer the messages to my old Linux server. I wanted my new server to take it over. I thought that it would be easy. Just change the server to which you send the log messages and that was it. It was different. I found no messages in my log files. I googled around but I must have asked the wrong question. I found no answer. Yesterday I decided to pick up my quest. If I ever wanted to get rid of the old server then this would need to be solved. After a long search I came up with the right question and the right answer. My question was rsyslogd InputTCPServerRun. How did I come to this question? I looked into the /etc/rsyslog.conf file and found the following entries:

# provides UDP syslog reception
#$ModLoad imudp
#$UDPServerRun 514

# provides TCP syslog reception
#$ModLoad imtcp
#$InputTCPServerRun 514

Now the solution was simple. I just uncommented the lines and reconfigured and restarted the syslog on my server. The messages came into the log-files of my new Linux server. Now I will only need to check if I really need both UDP and TCP. My guess is that I only need TCP. I will change this page once that I have the answer.