Hi, so here comes the answer to your question.
Currently, you are using UDP transmission of messages. If your central server is not available, the messages will be dropped and thus are lost. Easiest way to resolve this would be to use TCP instead. Here is an article from the rsyslog documentation about reliable forwarding with rsyslog. Using it to make a reliable setup is of course suggested. http://www.rsyslog.com/doc/rsyslog_reliable_forwarding.html Best regards, Florian -----Ursprüngliche Nachricht----- Von: [email protected] [mailto:[email protected]] Im Auftrag von Josu Lazkano Gesendet: Montag, 4. Juli 2011 13:19 An: rsyslog-users Betreff: Re: [rsyslog] delete local logs Thanks Rainer, I have another question: if the server is not accessible (shutdown, network problem...), what happens with the logs? It will be lost? Thanks again and kind regards. -----Mensaje original----- De: [email protected] [mailto:[email protected]] En nombre de Rainer Gerhards Enviado el: lunes, 04 de julio de 2011 13:00 Para: rsyslog-users Asunto: Re: [rsyslog] delete local logs auth.*,authpriv.* @logserver & ~ HTH Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Josu Lazkano > Sent: Monday, July 04, 2011 12:55 PM > To: rsyslog-users > Subject: [rsyslog] delete local logs > > Hello list, I am trying to configure the log system on my LAN. I want > to send > my logs to a remote server this way: > > auth.*,authpriv.* @logserver > > It sends well all auth logs, but I want to just send and not log on > /var/log/auth.log locally > > Is this possible? > > Thanks for all your help. > > Best regards. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
