Hi, I am trying to setup rsyslog server in my lab.
This is air-gapped environment, so can't copy/paste the config files 🙁 I have a RHEL 8 client machine. On that machine, I have configured /etc/rsyslog.conf with module(load="imtcp") input(type="imtcp" port="514" Then, I have configured /etc/rsyslog.d/50-default.conf as below. *.* @@<ip-address-of-rsyslog-server> On the rsyslog server side, my /etc/rsyslog.conf has $template RemoteLogs, "/var/log/%HOSTNAME%/%PROGRAMNAME%.log" . ?RemoteLogs ... ... I do see some logs on the rsyslog server but not all of them, like message, /var/log/audit/audit.log, secure etc. are not being copied to rsyslog server. What am I missing? Thanks for your help. Jayesh _______________________________________ Jayesh Kamdar R116 - Lab Services System Administrator, Lead 781-271-5352 _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
