From Michael's Information Zone
Jump to: navigation, search

CentOS 7

[1]

Purpose

To receive logs from NXFilter for remote parsing, because users be doin' stuff!

Commands

For me rsyslog was already installed from the minimal install package, just needed to update the config file. In this case I am running on the same server NXFilter is running on.[2][3]

  • Check that the following entries are set correctly.

/etc/rsyslog.conf

Ruleset (name="nxfilter") {Action (type="omfile" file="/var/log/nxfiltersys.log")}

# Provides UDP syslog reception
$ModLoad imudp
$UDPServerRun 514
Input (type="imudp" port="514" ruleset="nxfilter")