Visit the LQ Articles and Editorials section
Go Back > Forums > Linux Forums > Linux - Server
User Name
Linux - Server This forum is for the discussion of Linux Software used in a server related context.


  Search this Thread
Old 04-28-2010, 04:51 PM   #1
Registered: Jan 2006
Location: USA
Posts: 540

Rep: Reputation: 52
Redistribution of Syslog Messages

RHEL 5.4
i want to be able to do redistribution of inbound syslog messages to syslogd. as example, my syslog.conf has in it at the end:

*.* @
*.* @

my sysconfig/syslog file has "-r" as the only option for syslogd.

any messages generated by the localhost will be sent to the two remote servers, but messages that come into this box (udp 514) only get logged locally and do not get sent out to the remote hosts.

you may ask why do i want to do this. because i have several syslog servers (for security purposes) and many of my net devices are configured to send syslog to all the syslog servers, hence each device is sending way too much duplicate udp-514. so i would like to minimize the udp-514 coming out of the devices, have all devices send to a central syslog server, and then central syslog server do distribution to the other syslog servers. others have also called this "syslog proxy". or, if not with syslogd, how to achieve this (preserving the original syslog message host info, etc)?

is this possible with syslogd or syslog-ng or rsyslog?


Last edited by Linux_Kidd; 04-28-2010 at 05:30 PM.
Old 04-29-2010, 05:21 AM   #2
Registered: Aug 2008
Location: Get back in your Cube Unix Boy!
Distribution: rh5, oel5, debian etch, solaris
Posts: 228

Rep: Reputation: 36

Youi could look at using the 'netdump' package to do this as well. We have a number of rhel 4.7 and 5.3 hosts which installed the netdump package on, and rather than using the vmcore dump facility we just used the syslog facility.

Look at for more info.




Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
syslog to accept remote messages ilnli Linux - Software 1 08-02-2006 06:19 AM
Syslog messages... stevemad Slackware 4 10-15-2005 03:45 PM
syslog messages on SLES9 console MrHPUX Linux - Software 0 10-13-2005 01:44 PM
syslog and firestarter - log messages to another file than messages mule Linux - Newbie 0 08-07-2003 03:35 AM
SYSLOG not writing messages from my firewall. adamrau Linux - Security 15 01-10-2002 05:03 PM

All times are GMT -5. The time now is 11:57 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration