I have a situation where I need clients to send encrypted to a forwarder syslog server, and then have it re-send the packets, encrypted to another syslog (not syslog-ng) server. My current situation has the clients sending directly to the syslog server encrypted, and it is working, now I am trying to get the middle piece in.

If I use a config file like below, will this also re-encrypt and send to the other syslog server? The reason I want to do this is because the other syslog server only accepts encrypted traffic, and if I decide to send it plain traffic, I have to take that down and change things on that end, which I'd rather not do.

thx

$DefaultNetstreamDriver gtls

$DefaultNetstreamDriverCAFile /etc/rsyslog/ca.pem
$DefaultNetstreamDriverCertFile /etc/rsyslog/cert.pem
$DefaultNetstreamDriverKeyFile /etc/rsyslog/key.pem

$ModLoad imtcp
$ModLoad imuxsock

$PreserveFQDN on

$WorkDirectory /var/rsyslog
$ActionQueueType LinkedList
$ActionQueueFileName rsyslog-fwd
$ActionResumeRetryCount -1
$ActionQueueSaveOnShutdown on
$ActionQueueMaxDiskSpace 1000m

$SystemLogSocketName /var/rsyslog/log

$InputTCPServerStreamDriverMode 1
$InputTCPServerStreamDriverAuthMode anon
$InputTCPServerRun 110

*.* @@rsyslog.ooma.com:110

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/

Reply via email to