I have a situation where I need clients to send encrypted to a forwarder
syslog server, and then have it re-send the packets, encrypted to
another syslog (not syslog-ng) server. My current situation has the
clients sending directly to the syslog server encrypted, and it is
working, now I am trying to get the middle piece in.
If I use a config file like below, will this also re-encrypt and send to
the other syslog server? The reason I want to do this is because the
other syslog server only accepts encrypted traffic, and if I decide to
send it plain traffic, I have to take that down and change things on
that end, which I'd rather not do.
thx
$DefaultNetstreamDriver gtls
$DefaultNetstreamDriverCAFile /etc/rsyslog/ca.pem
$DefaultNetstreamDriverCertFile /etc/rsyslog/cert.pem
$DefaultNetstreamDriverKeyFile /etc/rsyslog/key.pem
$ModLoad imtcp
$ModLoad imuxsock
$PreserveFQDN on
$WorkDirectory /var/rsyslog
$ActionQueueType LinkedList
$ActionQueueFileName rsyslog-fwd
$ActionResumeRetryCount -1
$ActionQueueSaveOnShutdown on
$ActionQueueMaxDiskSpace 1000m
$SystemLogSocketName /var/rsyslog/log
$InputTCPServerStreamDriverMode 1
$InputTCPServerStreamDriverAuthMode anon
$InputTCPServerRun 110
*.* @@rsyslog.ooma.com:110
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/