# if you experience problems, check
# http://www.rsyslog.com/doc/troubleshoot.html for assistance
# The following template setting enables output matching legacy syslogd.
# WARNING: removal will enable default rsyslog output which could
# break scripts parsing logging output.
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# rsyslog v3: load input modules
# If you do not load inputs, nothing happens!
#$ModLoad immark # provides --MARK-- message capability
#$ModLoad imuxsock # can be used for rate-limiting and flow-control
$ModLoad imsolaris # for Solaris kernel logging
# Read drop-in files from /etc/rsyslog.d
$IncludeConfig /etc/rsyslog.d/
# High priority messages to the console
*.err /dev/sysmsg
# Next highest priority to the messages file
*.err;kern.debug;daemon.notice;auth.none;mail.crit /var/adm/messages
# Preserve traditional Solaris syslog defaults
*.alert;kern.err;daemon.err :omusrmsg:operator
*.alert :omusrmsg:root
# kern.notice goes to a file until rsyslog learns how not to clutter
# the console.
kern.notice -/var/log/kern.log
# Everybody gets emergency messages
*.emerg :omusrmsg:*
mail.debug /var/log/syslog
# Remote Logging (we use TCP for reliable delivery)
# An on-disk queue is created for this action. If the remote host is
# down, messages are spooled to disk and sent when it is up again.
#$WorkDirectory /var/spool/rsyslog # where to place spool files
#$ActionQueueFileName uniqName # unique name prefix for spool files
#$ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible)
#$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
#$ActionQueueType LinkedList # run asynchronously
#$ActionResumeRetryCount -1 # infinite retries if host is down
# remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional
#*.* @@remote-host:514
# ######### Receiving Messages from Remote Hosts ##########
# TCP Syslog Server:
# provides TCP syslog reception and GSS-API
#$ModLoad imtcp.so # load module
#$InputTCPServerRun 514 # start up TCP listener at port 514
# UDP Syslog Server:
#$ModLoad imudp.so # provides UDP syslog reception
#$UDPServerAddress * # listen to all IP addresses
#$UDPServerRun 514 # start a UDP syslog server at standard port 514