kazulog@sv1:~$ for f in /etc/rsyslog.conf /etc/rsyslog.d/10-remote.conf; do echo "===== $f"; sudo cat "$f" 2>/dev/null; done ===== /etc/rsyslog.conf # /etc/rsyslog.conf configuration file for rsyslog # # For more information install rsyslog-doc and see # /usr/share/doc/rsyslog-doc/html/configuration/index.html # # Default logging rules can be found in /etc/rsyslog.d/50-default.conf ################# #### MODULES #### ################# module(load="imuxsock") # provides support for local system logging #module(load="immark") # provides --MARK-- message capability # provides UDP syslog reception module(load="imudp") input(type="imudp" port="514") # provides TCP syslog reception module(load="imtcp") input(type="imtcp" port="514") # ログを受け付ける送信元 $AllowedSender UDP, 192.168.100.1/32 $AllowedSender TCP, 192.168.100.1/32 # provides kernel logging support and enable non-kernel klog messages module(load="imklog" permitnonkernelfacility="on") ########################### #### GLOBAL DIRECTIVES #### ########################### # Filter duplicated messages $RepeatedMsgReduction on # # Set the default permissions for all log files. # $FileOwner syslog $FileGroup adm $FileCreateMode 0640 $DirCreateMode 0755 $Umask 0022 $PrivDropToUser syslog $PrivDropToGroup syslog # # Where to place spool and state files # $WorkDirectory /var/spool/rsyslog # # Include all config files in /etc/rsyslog.d/ # $IncludeConfig /etc/rsyslog.d/*.conf ===== /etc/rsyslog.d/10-remote.conf # 送信元ホストごとにファイルを分ける template(name="RemoteFile" type="string" string="/var/log/remote/%HOSTNAME%/messages.log") ruleset(name="remote") { action(type="omfile" dynaFile="RemoteFile") } input(type="imudp" port="514" ruleset="remote") input(type="imtcp" port="514" ruleset="remote")