Configuring rsyslog for centralized logging
The central logging setup is created by turning on the rsyslog UDP input module,
imudp, and building the rsyslog template to receive log messages from other servers. The
imudp input module allows syslog messages to be broadcast over UDP to be received by the
Enable the options shown in the following screenshot in
/etc/rsyslog.conf (the rsyslog configuration file) before saving the file and closing the editor.
imudp input module needs to be configured to utilize the default UDP port of
514 to work:
Figure 11.3 – imudp module configuration
The following rsyslog template will allow you to collect logs from other...