05 Mar

remote syslog via rsyslogs relp module

This is a config for rsyslogd with RELP

I am setting up rsyslog to send all of its logs to a remote log collection server where I will store them on disk.

Later I will talk about how I have used logstash to pull in these files once on the system.

I won’t bother posting the default lines almost all rsyslog config files will have.

I setup some basic udp collectors for legacy devices

$ModLoad imudp
$UDPServerAddress 0.0.0.0
$UDPServerRun 514

Then load the relp module to provide more reliable tcp logging.  I am going to have mine communicate on tcp port 1088

$ModLoad imrelp
$InputRELPServerRun 1088

The other two custom options I have set are for preserving fqdn because I need the full name to differentiate devices in different cities.

$PreserveFQDN on

I also tun off the message reduction to allow the systems I plan to implements better count messages.

$RepeatedMsgReduction off

Now on the client side all I have to do is include the relp module again and forward all messages via *.*

$ModLoad omrelp
*.* :omrelp:remotesyslog.example.org:1088;RSYSLOG_ForwardFormat

I am also using the RSYSLOG_ForwardFormat to preserve the severity and priority when the message is sent.

One thought on “remote syslog via rsyslogs relp module

  1. I think we both did the same sort of thing after looking at Graylog2, but I ended up with a Python-based liesentr service injecting logs into a Postgres database.I've been wanting to work more with solr for some time now. Will review what you have and will see where I can expand it. Thanks for the post!tom
  2. Your comment is awaiting moderation.
    Superb forum posts. Cheers. http://canadianpharmacysilo.com/ canadian discount pharmacy north west pharmacy canada canadian family pharmacy aarp approved canadian online pharmacies pharmacy cost comparison canada pharmacy online orders cheap canadian drugs <a href="http://www.homewp.ir/?fmame_user=&mail_user=lucasbuife%40gmail.com&comment=+%0D%0AFine+content.+Appreciate+it.+%0D%0Ahttp%3A%2F%2Fcanadianonlinepharmacynnm.com%2F+%0D%0Acanadian+pharmacy+no+prescription+needed+%0D%0Aglobal+pharmacy+canada+%0D%0Adrugs+without+prescription+%0D%0Acanada+pharmaceutical+online+ordering&captcha=">mexican pharmacies online <a href="http://www.oyunuzayi.com/blog/?s=&submit=&comment=+%0D%0ANicely+put%2C+With+thanks.+%0D%0Ahttp%3A%2F%2Fcanadianpharmaciescubarx.com%2F+%0D%0Acanada+pharmacy+canadian+pharmacy+online+pharmacy+canadian+pharmacy+%0D%0Amexican+pharmacies+online+%0D%0Acanadian+pharmacies+that+ship+to+us+%0D%0Amexican+pharmacy+online+medications+%0D%0Acheap+prescription+drugs+%0D%0Acanadian+pharmacy+%0D%0Acanadian+prescription&author=QuentinMaign&email=zittel020eejf%40songwriter.net&url=http%3A%2F%2Fhttps%3A%2F%2Fnicktambone.com%2F&passthis=2U8%5Esok9lxB&comment_post_ID=1421&comment_parent=0">safe canadian online pharmacies buy prescription drugs from canada

Leave a Reply

Your email address will not be published. Required fields are marked *