Header Shadow Image


DD-WRT Remote rsyslog logging

Enable rsyslog listening on server:

# cat /etc/rsyslog.d/remote.conf
# Provides UDP syslog reception
$ModLoad imudp
$UDPServerRun 514

# Provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514

# Create a log file for each host
$template FILENAME,"/var/log/rsyslog/%fromhost%.log"
*.* ?FILENAME
#

Or this rsyslog.conf file:

[root@mbpc-pc log]# grep -Ev "^#" /etc/rsyslog.conf | sed -e "/^$/d"
$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
$ModLoad imklog   # provides kernel logging support (previously done by rklogd)
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$IncludeConfig /etc/rsyslog.d/*.conf
:msg,contains,"qla2xxx" /var/log/qla2xxx-hba.log
& ~
*.info;mail.none;authpriv.none;cron.none                /var/log/messages
authpriv.*                                              /var/log/secure
mail.*                                                  -/var/log/maillog
cron.*                                                  /var/log/cron
*.emerg                                                 *
uucp,news.crit                                          /var/log/spooler
local7.*                                                /var/log/boot.log
[root@mbpc-pc log]#

 

Restart rsyslogd:

service rsyslogd restart

Under the DD-WRT Services -> Services menu enable the following:

System Log
Syslogd          : Enabled
Remote Server: 192.168.0.14

(It assumes port 514, default syslogd port)

Cheers,
TK

 

 


     
  Copyright © 2003 - 2013 Tom Kacperski (microdevsys.com). All rights reserved.

Creative Commons License
This work is licensed under a Creative Commons Attribution 3.0 Unported License