Centralized log server
by z_haseeb from LinuxQuestions.org on (#55GBJ)
ENVIRONMENT
CENTOS = 7.8
vi /etc/rsyslog.conf
# Load the MySQL Module
module(load="ommysql")
#*.* : ommysql:127.0.0.1,Syslog_Database,syslog_user,password
*.* : ommysql:127.0.0.1,Syslog,rsyslog,MYSQLPASSWORD
$template TmplAuth, "/var/log/%HOSTNAME%/%PROGRAMNAME%.log"
*.* ?TmplAuth
CASE SUMMARY
I have configured centralized log server on centos for my windows servers thru SolarWinds_Event_LogForwarder agent. I am able to forward the logs with hostname under /var/log folder. Everyday I see current day logs and previous day logs disappear.
CENTOS = 7.8
vi /etc/rsyslog.conf
# Load the MySQL Module
module(load="ommysql")
#*.* : ommysql:127.0.0.1,Syslog_Database,syslog_user,password
*.* : ommysql:127.0.0.1,Syslog,rsyslog,MYSQLPASSWORD
$template TmplAuth, "/var/log/%HOSTNAME%/%PROGRAMNAME%.log"
*.* ?TmplAuth
CASE SUMMARY
I have configured centralized log server on centos for my windows servers thru SolarWinds_Event_LogForwarder agent. I am able to forward the logs with hostname under /var/log folder. Everyday I see current day logs and previous day logs disappear.