How to configure rsyslog for basic remote logging

 1.How to enable a basic remote logging via  TCP port.
Step 1 (of course you need at least one rsyslog server an one client)
What to do on the server machine to recive rsyslog messages

sudo nano /etc/rsyslog.conf

If the following lines exist uncomment them if not add them:

$ModLoad imtcp
$InputTCPServerRun 10512

Save the file and exit.

Step 2 - restart rsyslog service like this:

sudo service rsyslog restart

Step 3 - the client side
Edit the rsyslog file like this:

sudo nano /etc/rsyslog.conf 

After all the rules in there you add this lines:
*.*   @@192.168.1.52:10512
# if you need to forward to other systems as well, just
# add additional config lines:
*.*   @@other-server.example.net:10512

Save and exit.Restart rsyslog like I showd you in Step 2.


Note that rsylog messages from the client will be writen in the same files as your local log.