20.5. Setting Up a Virtualization Host Logging Server

Procedure 20.1. Setting up a Virtualization Host Logging Server

1. Configure SELinux to allow rsyslog traffic.

   # semanage port -a -t syslogd_port_t -p udp 514

   Copy to Clipboard Toggle word wrap
2. Edit /etc/rsyslog.conf and add the following lines:

   $template TmplAuth, "/var/log/%fromhost%/secure" 
   $template TmplMsg, "/var/log/%fromhost%/messages" 
   
   $RuleSet remote
   authpriv.*   ?TmplAuth
   *.info,mail.none;authpriv.none,cron.none   ?TmplMsg
   $RuleSet RSYSLOG_DefaultRuleset
   $InputUDPServerBindRuleset remote
   

   Copy to Clipboard Toggle word wrap
   Uncomment the following:

   #$ModLoad imudp
   #$UDPServerRun 514

   Copy to Clipboard Toggle word wrap
3. Restart the rsyslog service:

   # systemctl restart rsyslog.service

   Copy to Clipboard Toggle word wrap