Install remote syslog server

image_print
vi /etc/rsyslog.conf
# provides UDP syslog reception
module(load="imudp")
input(type="imudp" port="514")

# provides TCP syslog reception
module(load="imtcp")
input(type="imtcp" port="514")

restart syslog server

service syslog restart

check config

netstat -tulpn | grep rsyslogd
tcp   0    0    0.0.0.0:514    0.0.0.0:*    LISTEN    18785/rsyslogd
tcp6  0    0    :::514         :::*         LISTEN    18785/rsyslogd
udp   0    0    0.0.0.0:514    0.0.0.0:*              18785/rsyslogd
udp6  0    0    :::514         :::*                   18785/rsyslogd