LinuxQuestions.org - Rsyslog-Flow Control

- Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)

- - Rsyslog-Flow Control (https://www.linuxquestions.org/questions/linux-newbie-8/rsyslog-flow-control-4175622879/)

Rsyslog-Flow Control

Folks,

I am setting up syslog server (centos) which is suppose to lof messages from the cisco box (A10). I configured everything and was looking the packet capture on the syslog server on port 514 and I see packets coming in but not getting logged in "/var/log/messages" (that is the location I gave in rsyslog.conf). After hours of digging, I found there is no route on syslog server to reach the cisco box. Therefore, I added the route and I see logs in the desired folder.

What I dont understand is, why syslog server needs to reach the cisco box to make it work since being an UDP traffic? I though one way communication is enough for syslog to work. Please correct me if my logic is not correct.

Quote:

Originally Posted by pradeepspa (Post 5814393)

Folks,
I am setting up syslog server (centos) which is suppose to lof messages from the cisco box (A10). I configured everything and was looking the packet capture on the syslog server on port 514 and I see packets coming in but not getting logged in "/var/log/messages" (that is the location I gave in rsyslog.conf). After hours of digging, I found there is no route on syslog server to reach the cisco box. Therefore, I added the route and I see logs in the desired folder.

What I dont understand is, why syslog server needs to reach the cisco box to make it work since being an UDP traffic? I though one way communication is enough for syslog to work. Please correct me if my logic is not correct.

Because a client-server program needs for BOTH to talk to each other. And a network protocol won't work AT ALL if you don't configure networking (obviously enough):
https://en.wikipedia.org/wiki/Syslog
https://en.wikipedia.org/wiki/Client...93server_model

I understand client-server should have communication but just considering its udp thought one way communication would work. Anyways thanks you.