1 # if you experience problems, check

     2 # http://www.rsyslog.com/doc/troubleshoot.html for assistance

     3 

     4 # rsyslog v3: load input modules

     5 # If you do not load inputs, nothing happens!

     6 

     7 #$ModLoad immark	# provides --MARK-- message capability

     8 #$ModLoad imuxsock	# can be used for rate-limiting and flow-control

     9 $ModLoad imsolaris	# for Solaris kernel logging

    10 

    11 

    12 # High priority messages to the console

    13 *.err;kern.notice;auth.notice			/dev/sysmsg

    14 # Next highest priority to the messages file

    15 *.err;kern.debug;daemon.notice;mail.crit	/var/adm/messages

    16 

    17 # Preserve traditional Solaris syslog defaults

    18 *.alert;kern.err;daemon.err			:omusrmsg:operator

    19 *.alert						:omusrmsg:root

    20 

    21 # Log anything (except auth, cron, daemon & mail) of level info or higher.

    22 *.info;mail.none;auth.none;cron.none		-/var/log/misc.log

    23 

    24 # Log all the auth, daemon & mail messages in one place.

    25 auth.*						-/var/log/auth.log

    26 daemon.*					-/var/log/daemon.log

    27 mail.*						-/var/log/mail.log

    28 

    29 # Everybody gets emergency messages

    30 *.emerg						:omusrmsg:*

    31 

    32 # Remote Logging (we use TCP for reliable delivery)

    33 # An on-disk queue is created for this action. If the remote host is

    34 # down, messages are spooled to disk and sent when it is up again.

    35 #$WorkDirectory /var/spool/rsyslog	# where to place spool files

    36 #$ActionQueueFileName uniqName	# unique name prefix for spool files

    37 #$ActionQueueMaxDiskSpace 1g	# 1gb space limit (use as much as possible)

    38 #$ActionQueueSaveOnShutdown on	# save messages to disk on shutdown

    39 #$ActionQueueType LinkedList	# run asynchronously

    40 #$ActionResumeRetryCount -1	# infinite retries if host is down

    41 # remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional

    42 #*.* @@remote-host:514

    43 

    44 

    45 # ######### Receiving Messages from Remote Hosts ########## 

    46 # TCP Syslog Server:

    47 # provides TCP syslog reception and GSS-API

    48 #$ModLoad imtcp.so	# load module

    49 #$InputTCPServerRun 514	# start up TCP listener at port 514

    50 

    51 # UDP Syslog Server:

    52 #$ModLoad imudp.so	# provides UDP syslog reception

    53 #$UDPServerAddress *	# listen to all IP addresses

    54 #$UDPServerRun 514	# start a UDP syslog server at standard port 514