Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible?

If so, how is it done exactly? The syslog.conf file doesn't help too much.

share|improve this question
Have you done any research already? Sending logging entries to a remote server is one of the core capabilities of syslogd. Here's just one guide I quickly dug up:… – Oliver Salzburg Apr 4 '12 at 12:52
@OliverSalzburg For completeness here is a guide describing the problems in the syslog "plain tcp format", an interesting read:… – Shadok Apr 4 '12 at 13:08
@Oliver Salzburg According to my understanding, syslogd is the daemon running the local logging. – user6004 Apr 4 '12 at 15:14
One might want to have a look at RELP, which addresses some of the reliability issues that may (rarely) pop up with rsyslogd.… – lysdexia Aug 20 '13 at 20:51
up vote 6 down vote accepted

Yes it is possible and you can use rsyslog.

There is a good online manual for doing this:

And the general rsyslog doc is:

share|improve this answer
I use rsyslog for this exact purpose. – LawrenceC Aug 20 '13 at 21:00
@mattdm could you explain why using rsyslog is plain wrong? It does work for me and others (customers): I have been using it in various professional environments. But I guess you have some arguments and I would be curious to here them and discuss further with you. For this purpose I invite you to use the chat feature. We could then put a summary here once we discussed it. – Huygens Aug 21 '13 at 7:43
@mattdm Ho, OK understood. I did not see that the words carried such strong "narrow" emphasis. I will update the sentence then. – Huygens Aug 21 '13 at 12:47

You can do this by adding the following line at the end of /etc/rsyslog.conf

for udp

*.* @remoteserverip

for tcp

*.* @@remoteserverip

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .