rSyslog

Guardar dados em queue no rsyslog client

Guardar dados em queue no rsyslog client caso não consiga contactar o rsyslog server

# start forwarding rule 1
$ActionQueueType LinkedList # use asynchronous processing
$ActionQueueFileName srvrfwd1 # set file name, also enables disk mode
$ActionResumeRetryCount -1 # infinite retries on insert failure
$ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
*.* @@server1:port
# end forwarding rule 1
#
https://www.rsyslog.com/doc/v8-stable/tutorials/reliable_forwarding.html

rSyslog servidor

Guardar logs com nome de hostname cliente

No /etc/rsyslog.d/ criar um arquivo “59-remotehostname-in-file.conf” com a configuração abaixo

$template DynaFile,”/var/log/system-%HOSTNAME%.log”
*.* -?DynaFile