remote syslog

idlehands · 08-18-2011, 08:48 AM

If i have a system using remote syslog to a syslog server, and it loses connection, or fails to send packets to that server for whatever reason, will there be issued recorded locally?

I'm trying to find an example message, without starting up a pair of vm images and configuring it and injecting an error.

Thanks

acid_kewpie · 08-18-2011, 08:53 AM

if you're using udp then it won't, *can't* know as it's a purely one way street, no ip packets ever come back. you can try using tcp instead if your syslog client and server of choice support it.

unSpawn · 08-18-2011, 10:37 AM

...also see Rsyslog -> RELP?

Reuti · 08-19-2011, 10:30 AM

By syslog you mean the plain syslogd and not anything like syslog-ng or rsyslog? With syslog-ng you can also specify to record the entries at various locations. Being it different files or remote syslog servers.