1#  /etc/rsyslog.conf    Configuration file for rsyslog.
 2#
 3#                       For more information see
 4#                       /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
 5#
 6#  Default logging rules can be found in /etc/rsyslog.d/50-default.conf
 7
 8
 9#################
10#### MODULES ####
11#################
12
13module(load="imuxsock") # provides support for local system logging
14#module(load="immark")  # provides --MARK-- message capability
15
16# provides UDP syslog reception
17module(load="imudp")
18input(type="imudp" port="514")
19
20# provides TCP syslog reception
21module(load="imtcp")
22input(type="imtcp" port="514")
23
24# provides kernel logging support and enable non-kernel klog messages
25module(load="imklog" permitnonkernelfacility="on")
26
27###########################
28#### GLOBAL DIRECTIVES ####
29###########################
30
31#
32# Use traditional timestamp format.
33# To enable high precision timestamps, comment out the following line.
34#
35$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
36
37# Filter duplicated messages
38$RepeatedMsgReduction on
39
40#
41# Set the default permissions for all log files.
42#
43$FileOwner syslog
44$FileGroup adm
45$FileCreateMode 0640
46$DirCreateMode 0755
47$Umask 0022
48$PrivDropToUser syslog
49$PrivDropToGroup syslog
50
51#
52# Where to place spool and state files
53#
54$WorkDirectory /var/spool/rsyslog
55
56#
57# Include all config files in /etc/rsyslog.d/
58#
59$IncludeConfig /etc/rsyslog.d/*.conf
60
61$template remote-incoming-logs,"/var/log/%HOSTNAME%.log
62*.* ?remote-incoming-logs
63& ~