19.5. Setting Up a Host Logging Server

semanage port -a -t syslogd_port_t -p udp 514

# semanage port -a -t syslogd_port_t -p udp 514

$template TmplAuth, "/var/log/%fromhost%/secure"
$template TmplMsg, "/var/log/%fromhost%/messages"

$RuleSet remote
authpriv.*   ?TmplAuth
*.info,mail.none;authpriv.none,cron.none   ?TmplMsg
$RuleSet RSYSLOG_DefaultRuleset
$InputUDPServerBindRuleset remote

$template TmplAuth, "/var/log/%fromhost%/secure"
$template TmplMsg, "/var/log/%fromhost%/messages"

$RuleSet remote
authpriv.*   ?TmplAuth
*.info,mail.none;authpriv.none,cron.none   ?TmplMsg
$RuleSet RSYSLOG_DefaultRuleset
$InputUDPServerBindRuleset remote

#$ModLoad imudp
#$UDPServerRun 514

#$ModLoad imudp
#$UDPServerRun 514

systemctl restart rsyslog.service

# systemctl restart rsyslog.service