smart people

whats the procedure and the commands to make it work please?

I have a PRTG monitoring software running on one of the VMs.  I would like to save the unraid syslog there. 

so how do I duplicate the log messages to be sent to 10.0.0.50 port 154 ?

 

 

In the syslog config file (/etc/rsyslog.conf) the commands are already there, just commented out. Uncomment and adapt the parameters.

thanks

done it

 

what is this error msg after restart of syslogd

 

Tower liblogging-stdlog: [origin software="rsyslogd" swVersion="8.23.0" x-pid="8683" x-info="http://www.rsyslog.com"] start
Dec 6 05:38:57 Tower liblogging-stdlog: $WorkDirectory: /rsyslog/spool can not be accessed, probably does not exist - directive ignored [v8.23.0 try http://www.rsyslog.com/e/2181 ]
Dec 6 05:38:57 Tower liblogging-stdlog: error starting up disk queue, using pure in-memory mode [v8.23.0 try http://www.rsyslog.com/e/2036 ]

 

 

rsyslog buffers data in case the central syslog server is unreachable. It tries to buffer in RAM for efficiency, but resorts to queue files if there are too many messages to buffer. The files are created automatically if needed but you need to create the directory for it at the path given in the error message. For more info, look here: http://www.rsyslog.com/doc/master/tutorials/reliable_forwarding.html

is it normal the /etc/rsyslog.conf  is overwritten on reboot ?   

the parameters for the forwarding canceled again after the reboot

 

should I edit something  on the USB stick ?

Yes. Everything is ran from a ram disk. The system recreates on reboots. You need other means to make changes persistent.

 

User Scripts plug-in could help.

You can also edit the "go" file on usb to do commands to.

how do i do that? whats the correct commands pls?

not very experienced linux user...