RSYSLOG - Revision history

Michael.mast: /* Commands */

2018-04-03T15:43:12Z

Commands

Michael.mast: /* Commands */

2018-04-03T15:02:42Z

Commands

Michael.mast: /* Commands */

2018-04-03T14:40:28Z

Commands

Michael.mast: Created page with "==CentOS 7== https://www.itzgeek.com/how-tos/linux/centos-how-tos/setup-syslog-server-on-centos-7-rhel-7.html ===Purpose=== To receive logs from NXFilter for remote..."

2018-04-03T14:11:23Z

Created page with "==CentOS 7== <ref>https://www.itzgeek.com/how-tos/linux/centos-how-tos/setup-syslog-server-on-centos-7-rhel-7.html</ref> ===Purpose=== To receive logs from NXFilter for remote..."

New page

==CentOS 7==
<ref>https://www.itzgeek.com/how-tos/linux/centos-how-tos/setup-syslog-server-on-centos-7-rhel-7.html</ref>
===Purpose===
To receive logs from NXFilter for remote parsing, because users be doin' stuff!
===Commands===

@@ Line 4: / Line 4: @@
 To receive logs from NXFilter for remote parsing, because users be doin' stuff!
 ===Commands===
-For me rsyslog was already installed from the minimal install package, just needed to update the config file. In this case I am running on the same server NXFilter is running on.<ref>https://www.rsyslog.com/tag/ruleset/</ref>
+For me rsyslog was already installed from the minimal install package, just needed to update the config file. In this case I am running on the same server NXFilter is running on.<ref>https://www.rsyslog.com/tag/ruleset/</ref><ref>https://www.youtube.com/watch?v=fewUSu_QZAY</ref>
 *Check that the following entries are set correctly.
 /etc/rsyslog.conf

@@ Line 4: / Line 4: @@
 To receive logs from NXFilter for remote parsing, because users be doin' stuff!
 ===Commands===
-For me rsyslog was already installed from the minimal install package, just needed to update the config file. In this case I am running on the same server NXFilter is running on.
+For me rsyslog was already installed from the minimal install package, just needed to update the config file. In this case I am running on the same server NXFilter is running on.<ref>https://www.rsyslog.com/tag/ruleset/</ref>
 *Check that the following entries are set correctly.
 /etc/rsyslog.conf
 <pre>
-$Ruleset nxfilter
+Ruleset (name="nxfilter") {Action (type="omfile" file="/var/log/nxfiltersys.log")}
 # Provides UDP syslog reception
 $ModLoad imudp
 $UDPServerRun 514
-$InputUDPServerBindRuleset nxfilter
+Input (type="imudp" port="514" ruleset="nxfilter")

← Older revision		Revision as of 14:40, 3 April 2018
Line 4:		Line 4:
	To receive logs from NXFilter for remote parsing, because users be doin' stuff!		To receive logs from NXFilter for remote parsing, because users be doin' stuff!
	===Commands===		===Commands===
		+	For me rsyslog was already installed from the minimal install package, just needed to update the config file. In this case I am running on the same server NXFilter is running on.
		+	*Check that the following entries are set correctly.
		+	/etc/rsyslog.conf
		+	<pre>
		+	$Ruleset nxfilter
		+	. /var/log/nxfiltersys.log
		+	$Ruleset RSYSLOG_DefaultRuleset
		+
		+	# Provides UDP syslog reception
		+	$ModLoad imudp
		+	$UDPServerRun 514
		+	$InputUDPServerBindRuleset nxfilter