Friday 2 November 2012

How to enable rsyslog for both IPv4 and IPv6 in Linux fedora core 16

To enable rsyslog please follow these steps:

Syslog Server Fedora Core 16 PC

1) yum install syslog

2) vim /etc/rsyslog.conf

Modify below things

===================
$ModLoad imuxsock # provides support for local system logging (e.g. via logger c
ommand)
$ModLoad imklog   # provides kernel logging support (previously done by rklogd)
#$ModLoad immark  # provides --MARK-- message capability

# Provides UDP syslog reception
$ModLoad imudp
$UDPServerRun 514

# Provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514

# This one is the template to generate the log filename dynamically, depending o
n the client's IP address.

$template FILENAME,"/var/log/%fromhost-ip%/syslog.log"

#
# # Log all messages to the dynamically formed file. Now each clients log (192.1
68.1.2, 192.168.1.3,etc...), will be under a separate directory which is formed
by the template FILENAME.

 *.* ?FILENAME


=======================


3) start Syslog Server


systemctl restart rsyslog.service


Fedora Core 11 as Syslog Client

1) vim /etc/rsyslog.conf


2) Add the ipv6 server ip address (fe80::1e64:66ff:fec7:8221)

#### MODULES ####

$ModLoad imuxsock.so    # provides support for local system lo
 logger command)
$ModLoad imklog.so      # provides kernel logging support (pre
 rklogd)
#$ModLoad immark.so     # provides --MARK-- message capability

# Provides UDP syslog reception
#$ModLoad imudp.so
#$UDPServerRun 514

*.* @[fe80::1e64:66ff:fec7:8221]

3) Start syslog

systemctl restart rsyslog.service


Test Server

Make another interface down in client ( not the one through which the server is connected )

ifconfig eth1 down

ifconfig eth1 up

Server -> go to /var/log -> you should see ip address of client directory

go to that directory-> vim syslog.log -> should give details about the interface up and down.