DD-WRT Remote rsyslog logging
Enable rsyslog listening on server:
# cat /etc/rsyslog.d/remote.conf
# Provides UDP syslog reception
$ModLoad imudp
$UDPServerRun 514
# Provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514
# Create a log file for each host
$template FILENAME,"/var/log/rsyslog/%fromhost%.log"
*.* ?FILENAME
#
Or this rsyslog.conf file:
[root@mbpc-pc log]# grep -Ev "^#" /etc/rsyslog.conf | sed -e "/^$/d"
$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
$ModLoad imklog # provides kernel logging support (previously done by rklogd)
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$IncludeConfig /etc/rsyslog.d/*.conf
:msg,contains,"qla2xxx" /var/log/qla2xxx-hba.log
& ~
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* -/var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log
[root@mbpc-pc log]#
Restart rsyslogd:
service rsyslogd restart
Under the DD-WRT Services -> Services menu enable the following:
System Log
Syslogd : Enabled
Remote Server: 192.168.0.14
(It assumes port 514, default syslogd port)
Cheers,
TK