Re: [syslog-ng]logging to a central server

Stephen C Burns writes:

How exactly would one configure a host, so that it sends all logs to a central syslog-ng machine?

In the client's syslog-ng.conf: destination central { tcp("loghost.my.example.com" port(NNN)); }; Where NNN is the port number your central server is listening on. Over at the central server, you need to define the source: source src { tcp(port(NNN) max-connections(500)); internal(); }; You might want to put in other sources, such as local syslog messages or kernel messages. See the documentation for more description of the source and destination directives.