Purpose - Logging to remote log server instead of keeping log on locally for security reason.
In our case, we will send logs messages to a server with IP Address ( 192.168.1.2 )
How To
#vi /etc/syslog.conf
find the following line
*.info;mail.none;authpriv.none;cron.none /var/log/messages
change it to
*.info;mail.none;authpriv.none;cron.none @192.168.1.2
and restart the syslog server
#service syslog restart
May your logs be safe in peace! :D
No comments:
Post a Comment