From 17376044416846e6d2773bb13eb2262b437e534e Mon Sep 17 00:00:00 2001 From: "Dustin C. Hatch" Date: Tue, 29 Mar 2022 10:33:59 -0500 Subject: [PATCH] rsyslog: Send logs to Graylog Ideally, we would use the log server address provided by DHCP, but for now, we will just hard-code the destination. --- overlay/etc/rsyslog.conf | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/overlay/etc/rsyslog.conf b/overlay/etc/rsyslog.conf index 0cb72d1..c824535 100644 --- a/overlay/etc/rsyslog.conf +++ b/overlay/etc/rsyslog.conf @@ -1,4 +1,9 @@ global(workDirectory="/var/lib/rsyslog") module(load="imjournal" StateFile="imjournal.state") -*.* @172.30.0.28 +action( + type="omfwd" + Target="172.30.0.17" + Port="514" + template="RSYSLOG_SyslogProtocol23Format" +)