Syslog

• Syslog Facilities

• Modify config file /etc/syslog.conf

• By default syslog doesn't expect to receive messages from remote clients. Here's how to configure your Linux server to start listening for these messages.
• Edit /etc/default/syslogd directly and make the SYSLOGD variable definition become “-r”.
• Restart syslog server

# Options for start/restart the daemons
# For remote UDP logging use SYSLOGD="-r"
#
#SYSLOGD="-u syslog"
SYSLOGD="-r"

• Restart syslog server (Ubuntu/Debian)

sudo /etc/init.d/sysklogd restart

• Modify config file /etc/syslog.conf

• By default syslog doesn't expect to receive messages from remote clients. Here's how to configure your Linux server to start listening for these messages.
• On Redhat, Syslog will not listen for remote messages unless the SYSLOGD_OPTIONS variable in this file has a -r included in it as shown below.
• Restart syslog server

# Options to syslogd
# -m 0 disables ’MARK’ messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages received with -r
# See syslogd(8) for more details

SYSLOGD_OPTIONS="-m 0 -r"

# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
# once for processing with ’ksymoops’
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details

KLOGD_OPTIONS="-2"

• Restart syslog server (Redhat)

service syslog restart