[syslog-ng]logging to a central server

Ed Ravin eravin@panix.com
Mon, 7 Jan 2002 18:36:02 -0500 (EST)

Stephen C Burns writes:
> How exactly would one configure a host, so that it 
> sends all logs to a central syslog-ng machine?

In the client's syslog-ng.conf:

   destination central {
           tcp("loghost.my.example.com" port(NNN));

Where NNN is the port number your central server is listening on.

Over at the central server, you need to define the source:

   source src {
           tcp(port(NNN) max-connections(500));

You might want to put in other sources, such as local syslog
messages or kernel messages.  See the documentation for more
description of the source and destination directives.