Joined: 01 Jul 2004
Location: Burlington, VT
|Posted: Fri Nov 20, 2015 11:52 am Post subject: Question on rsyslog - Configuring local and remote logging
|Good morning. I am setting up a rsyslog remote syslog server. Although I have it working OK, I am trying to configure it so that it will log the hostsl local files as if it were not a syslog server (i.e. /var/log/messages, /var/log/secure etc...) and have any remote log clients to write to a file in /var/log/rsyslog/%HOSTNAME%/rsyslog.log .
I am getting logs as expected, the only part I am trying to figure out is this:
|$template TmplAuth, "/var/log/rsyslog/%HOSTNAME%/syslog.log"
I should mention that I am getting logs from a Barracuda firewall. Any help is much appreciated!