How to forward specific log file to a remote syslog server?


At this post, I added steps about how to forward specific log file to a remote Syslog server? If you need to forward application logs to your remote Syslog server then check these steps.

Step 1: Get your remote Syslog server IP

Step 2:Configure  Rsyslog File on Application Server

You should enable these two configurations from the application server Syslog config file.

Before:

#$ModLoad imtcp
#$InputTCPServerRun 514

After:

$ModLoad imtcp
$InputTCPServerRun 514

#vi /etc/rsyslog.conf
# rsyslog v5 configuration file

# For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html
# If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html

#### MODULES ####

$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
$ModLoad imklog # provides kernel logging support (previously done by rklogd)
#$ModLoad immark # provides --MARK-- message capability

# Provides UDP syslog reception
#$ModLoad imudp
#$UDPServerRun 514

# Provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514
#### GLOBAL DIRECTIVES ####

# Use default timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

# File syncing capability is disabled by default. This feature is usually not required,
# not useful and an extreme performance hit
#$ActionFileEnableSync on

# Include all config files in /etc/rsyslog.d/
$IncludeConfig /etc/rsyslog.d/*.conf
#### RULES ####

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none /var/log/messages

# The authpriv file has restricted access.
authpriv.* /var/log/secure

# Log all the mail messages in one place.
mail.* -/var/log/maillog
# Log cron stuff
cron.* /var/log/cron

# Everybody gets emergency messages
*.emerg *

# Save news errors of level crit and higher in a special file.
uucp,news.crit /var/log/spooler

# Save boot messages also to boot.log
local7.* /var/log/boot.log
# ### begin forwarding rule ###
# The statement between the begin ... end define a SINGLE forwarding
# rule. They belong together, do NOT split them. If you create multiple
# forwarding rules, duplicate the whole block!
# Remote Logging (we use TCP for reliable delivery)
#
# An on-disk queue is created for this action. If the remote host is
# down, messages are spooled to disk and sent when it is up again.
#$WorkDirectory /var/lib/rsyslog # where to place spool files
#$ActionQueueFileName fwdRule1 # unique name prefix for spool files
#$ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible)
#$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
#$ActionQueueType LinkedList # run asynchronously
#$ActionResumeRetryCount -1 # infinite retries if host is down
# remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional
#*.* @@remote-host:514
*.* @10.10.190.82:514
# ### end of the forwarding rule ###

# A template to for higher precision timestamps + severity logging
$template SpiceTmpl,"%TIMESTAMP%.%TIMESTAMP:::date-subseconds% %syslogtag% %syslogseverity-text%:%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n"

:programname, startswith, "spice-vdagent" /var/log/spice-vdagent.log;SpiceTmpl
*.* @<remotesyslog_serverI>:514

Step 3:Create  Application  Syslog  monitor  config  file

Application  Log File:/appdata/app.log

Application File Tag: APP

# vi /etc/rsyslog.d/app.conf
$ModLoad imfile
$InputFilePollInterval 10
$PrivDropToGroup adm
$InputFileName /appdata/app.log
$InputFileTag APP
$InputFileStateFile Stat-APP
$InputFileSeverity app
$InputFileFacility local7
$InputRunFileMonitor
$InputFilePersistStateInterval 1000

Step 4: Restart  rsyslog Service

#service  rsyslog restart

 

I'm a IT Infrastructure and Operations Architect with extensive experience and administration skills and works for Turk Telekom. I provide hardware and software support for the IT Infrastructure and Operations tasks.

205 Total Posts
Follow Me

Related Post

34 Comments

  1. Incredible quest there. What happened after? Take care!

  2. Dοes anhyone at %domain% hage any experience ԝith Love tօߋ CBD Marketplace fߋr CBD Brands? I heard good things about it and I aam thinking of listing JustCBD products oon tһіs marketplace but І am not entireⅼy sure ѡhether it iis worth it. I wοuld bbe m᧐st appreciative iif anyone аt %domain% witһ ѕome knowledge off this marketplace could revert to me еither һere oг vіa a DM Mɑny tһanks

  3. We are pleased to announce that Element Earth CBD Shop is now on Love to CBD Marketplace. Here, you can shop our entire CBD product range: https://lovetocbd.com/profile/element-earth-cbd-shop Lowest Price Guarantee Fairly simple and straight forward, ANY price better than ours will be matched, be it from the manufacturer or a retail store. We encourage you even to check out the manufacturer sites as they also have a plethora of information as well. If the price is less than ours incuding shipping if there is any from the competitor just simply email us the link, we email you back a one time code that not only will match the price, but also add and EXTRA discount of the price difference. Very simple, very adventageous. Though we constantly are updated on pricing and promotions manufacturers offer, we price accordingly, but once in a while we may not see something and by all means by telling us, you are also helping us, and you are getting a better price all around. Fast & Free Discreet Shipping… Free Shipping to the continental United States! No price padding to make up for “free shipping”, no gimmicks, ships via USPS and is fulfilled within 24 hours and on the way to you from our own warehouse. https://elementearthcbd.com/

  4. my own blog, I get people who will “like” my post, but they never actually leave a comment. That is frustrating, because I don’t know if they have actually read my content or they are liking it in hopes that I will come and visit them. You might gain a few followers by playing the numbers game, but they won’t stick around long if you’re not speaking your own authentic truth. Making REAL connections is what commenting (and blogging) is all about, right?

  5. Here’s my “added value”: I can’t stress enough the importance of being sincere in your comments. It would be easy for a reasonably intelligent person to use this formula and play the numbers game by commenting on as many blogs as possible. You MUST truly connect with the post–because when you do,  everything flows quite naturally. The greeting, the complement, the added value…you ask the thoughtful question because it’s something you truly want to know the answer to!

  6. I am a blogger who left the scene for a while, and now I’m back, and ready to make some new connections. I will most definitely be checking out your site! This excellent, super comprehensive post could not have come at a better time for me, thank you!

  7. Great day! I could have sworn I’ve been to this blog previously however in the wake of perusing a portion of the posts I understood it’s unfamiliar to me. In any case, I’m unquestionably happy I discovered it and I’ll be bookmarking and inquiring regularly! Great and Unique topic! Thanks for sharing this article. it is really helpful for blog commenting.

  8. Thank you! I’m really glad you enjoyed it. Did you have a favorite tip or suggestion? Anything new that jumped out at you? Spectacular post my friend, you really did give us ALL the scoop on how to stand out through commenting. I’ve been telling my readers this for years.

  9. I love this post. And you’re right, so many people say “Leave comments!” but no one tells you HOW. I get comments on mine that are just “Nice article”, which is nice validation, but I much prefer getting questions because it shows the commenter actually read the post I am very happy to say that it is an interesting publication to read. I learn new information from your article, you are doing a great job

  10. Hello I am so glpad I fund your site, I really found you by accident, while I was searchhing on Askjeeve for something else, Anyways I am here now and would just like to say thanks a lot for a remarkable post and a all round enjoyable blog (I also love tthe theme/design), I don't have time to read through it all at tthe minute bbut I have book-marked it and also included your RSS feeds, so when I have time I will be back to read a great deal more, Please do keep up the awesome work.

  11. I'm extremely impressed with your writing skills as well as with the layout on your blog. Is this a paid theme or did you modify it yourself? Anyway keep up the excellent quality writing, it is rare to see a great blog like this one these days.

  12. Good info. Lucky me I recently found your website by accident (stumbleupon). I've book marked it for later!

  13. discount rx https://rxpharmacyvaed.com/ canada pharmacy

  14. treatment for erectile dysfunction https://erectilejyzd.com ed drugs

  15. erectile dysfunction treatment http://impotencecdny.com/ ed meds online without doctor prescription

  16. canadian pharcharmy http://pharmaciescegs.com/ pharmacie de garde

  17. canadian pharmacy online https://onlinepharmacyxnxx.com modafinil online pharmacy

  18. viagra online canadian pharmacy https://canadianpharmacy-usx.com canada pharmacy online

  19. canadian pharmacy online http://canadianpharmacy-yy.com viagra online canadian pharmacy

  20. viagra online canadian pharmacy https://us-canadianpharmacy.com canadian drugs

  21. cneap viagyra viagra pills Sell Your property to Professional Home Clients - Should You Or Is best to Not_ The latest condition of the financial and real estate market drives many property sellers to search for alternative, unconventional methods to peddle their homes This is because moments have actually changed during great shape and the older days of simply just listing it with a may give or pretty much putting a FSBO, which stands for For Sale by Owner sign in front of the home seem to be out of tune nowadays It just appears to be not as powerful as iit was rice As of the moment, plenty of home suppliers agree that thefe are more benefits that can be accomplished when yoou promote your home towards a professional property buyer. Of course , that all depends on the way you define negative, but the vision statement of this FHA is to serve home owners who have poor credit and smaller money with respect to down payments. Exclusive lending institutions offer these types of pwrsonal loans There are also governmentally funded programs for this form of loan You can speak with a customer satisfaction representative for information about obtaining a loan.

  22. sildenafil pills sildenafil pills Various seemingly extra innocent performers that relate to sexual wellness might also posture some problemsFor example, undertaking the intesrview process date and sharing meal (You have to try this! ) oor sampling wine with a date's glass might also be a practical route inn transmission. Individuals that wish thbey were rich very often dream of mazking it big too enable them to hel othersThey have a a sense of wanting to give the less fortunateIf extra peopl who have the big bucks would reach oout to share some of the wealth that they can never need, the earth would be a greater place.

  23. cvs online pharmacy https://xz-pharmacyonline.com trusted online pharmacy reviews

  24. viagra doses 200 mg https://pillexrx.com/ viagra online canadian pharmacy

  25. how to get viagra without a doctor https://abcrxmed.com/ buy real viagra online

  26. canadian online pharmacy viagra https://usggrxmed.com/ viagra prescription online

  27. prescription viagra 100mg https://fmedrx.com/ cost of genuine viagra

  28. viagra online canadian pharmacy https://edabcrx.com/ best place to buy viagra online

  29. Cheap cialis https://cialedrx.com cialis price

  30. Tadalafil pills cialijomen.com buy cialis online

  31. Tadalafil buy cialijomen.com order cialis

  32. Viagra dosage viagra ingredients viagra and alcohol

  33. Otherwise, at the end of your 30 day trial we will extend your member benefits for a full year at the current annual membership fee. bestviagrx.com Otherwise, at the end of your 30 day trial we will extend your member benefits for a full year at the current annual membership fee.

  34. It can affect many organs, including liver, spleen, brain, and lungs. viagra pill It can affect many organs, including liver, spleen, brain, and lungs.

Leave a Reply