Table of Contents

rsyslogd

remote logs

server:

--snip--
$ModLoad imudp
$UDPServerAddress 10.5.0.70
$UDPServerRun 5140
--snip--

client

--snip--
#### custom RULES ####
auth,authpriv.*                 /var/log/auth.log
auth,authpriv.*                 ~

*.*     @10.5.0.70:5140

if $syslogfacility-text == 'local6' and $programname == 'apache2' then /var/rlog/httpd-access.log
if $syslogfacility-text == 'local6' and $programname == 'apache2' then ~
if $syslogfacility-text == 'local7' and $programname == 'apache2' then /var/rlog/httpd-error.log
if $syslogfacility-text == 'local7' and $programname == 'apache2' then ~

$IncludeConfig /etc/rsyslog.d/*.conf

#### RULES ####

#
# First some standard log files.  Log by facility.
#
*.*;auth,authpriv.none          -/var/log/syslog

#cron.*                         /var/log/cron.log
daemon.*                        -/var/log/daemon.log
kern.*                          -/var/log/kern.log
lpr.*                           -/var/log/lpr.log
mail.*                          -/var/log/mail.log
user.*                          -/var/log/user.log