Ensure rsyslog is configured to send logs to a remote log host


The rsyslog utility supports the ability to send logs it gathers to a remote log host running syslogd(8) or to receive messages from remote hosts, reducing administrative overhead.


Edit the /etc/rsyslog.conf and /etc/rsyslog.d/*.conf files and add the following line (where loghost.example.com is the name of your central log host):
*.* @@loghost.example.com

Run the following command to reload the rsyslogd configuration:
# pkill -HUP rsyslogd

See Also