Skip to content

Instantly share code, notes, and snippets.

@reyjrar
Created September 17, 2012 14:00
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save reyjrar/3737431 to your computer and use it in GitHub Desktop.
Save reyjrar/3737431 to your computer and use it in GitHub Desktop.
Rsyslog Client Configuration for ondisk caching to central server
# Rsyslog Defaults
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$WorkDirectory /var/run/rsyslog # Default Location for Work Files
# Modules
$ModLoad immark
$ModLoad imklog
$ModLoad imuxsock
# Local Logging
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* -/var/log/maillog
kern.* /var/log/kern.log
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log
# Discard SNMPD Spam
if $programname == 'snmpd' and ( $msg contains 'Connection from UDP' or $msg contains 'Received SNMP packet(s) from UDP' ) then ~
# Remote Logging with On Disk Queuring Enabled
$ActionQueueType LinkedList # Asynchronous Forwarding Mechanism
$ActionQueueFileName centralwork # Enable disk mode queue
$ActionResumeRetryCount -1 # Infinite Retries
$ActionQueueSaveOnShutdown on # Save Queue on Exit for reprocessing
*.* @@log.db0.us:514
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment