Sorry, the previous config was the server configuration. The client side config is attached. The commented statements are from the numerous attempts to get queuing+forwarding to work.
# /etc/rsyslog.conf Configuration file for rsyslog v3. # # For more information see # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
################# #### MODULES #### ################# $ModLoad imuxsock # provides support for local system logging $ModLoad imklog # provides kernel logging support (previously done by rklogd) #$ModLoad immark # provides --MARK-- message capability # provides UDP syslog reception #$ModLoad imudp #$UDPServerRun 514 # provides TCP syslog reception #$ModLoad imtcp #$InputTCPServerRun 514 # provides RELP support $ModLoad omrelp ########################### #### GLOBAL DIRECTIVES #### ########################### # # Use traditional timestamp format. # To enable high precision timestamps, comment out the following line. # $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat # # Set the default permissions for all log files. # $FileOwner root $FileGroup adm $FileCreateMode 0640 $DirCreateMode 0755 $Umask 0022 # # Include all config files in /etc/rsyslog.d/ # #$IncludeConfig /etc/rsyslog.d/*.conf # Provide memory and disk queueing $RepeatedMsgReduction off # log every message #$MainMsgQueueSaveOnShutDown on #$MainMsgQueueType Disk #$MainMsgQueueFileName mainq #$MainMsgQueueSize 5 #$MainMsgQueueHighWatermark 4 #$MainMsgQueueLowWatermark 2 #$MainMsgQueueMaxDiskSpace 1g $WorkDirectory /temp/rsyslog/work # default location for work (spool) files $ActionQueueType LinkedList # use asynchronous processing #$ActionQueueType Disk # sanity check - write everything to disk $ActionQueueFileName actionq # set file name, also enables disk mode $ActionResumeRetryCount -1 # infinite retries on insert failure $ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down #$ActionQueueSize 5 #$ActionQueueHighWaterMark 4 #$ActionQueueLowWatermark 2 #$ActionQueueMaxFileSize 1g #$OMFileAsyncWriting on ############### #### RULES #### ############### # # Emergencies are sent to everybody logged in. # *.emerg * # # Keep a copy of kernel messages, ship # everything else to asusb202 using RELP # :syslogfacility, isequal, "0" /var/log/kern.log *.* :omrelp:asusb202.dvrdns.org:514
