When I go to my /var/log/messages I can see the logger message that came from the windows rsyslog agent. That's how I know it's working.
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Rainer Gerhards Sent: Tuesday, April 02, 2013 11:59 AM To: [email protected] Subject: Re: [rsyslog] rsyslog newbie I don't understand the issue. You say you receive windows events but can't find them? If so, how do you know you received them? Sent from phone, thus brief. -------- Ursprüngliche Nachricht -------- Von: Josh Bitto <[email protected]> Datum: 02.04.2013 20:22 (GMT+01:00) An: rsyslog-users <[email protected]> Betreff: [rsyslog] rsyslog newbie Hello Everyone, Ok so I have been working with rsyslog for a couple of weeks now. I've been assigned to create a syslog server and all that funky stuff. I have a central syslog server setup with rsyslog basically "receiving" port 514 udp traffic. I'm a little confused about some stuff. Before anyone says read the guides....I've done that....but I think it needs to be dumbed down so I can understand it. What I'm trying to do is send windows event logs as well as other application logs from linux centos boxes to my syslog server. The regular default rules work...I can see them from a server that is forwarding its messages just fine. What I can't seem to get working is miscellaneous application logs or windows logs. I downloaded rsyslog windows agent...did the tutorial for setting up a rule.....tested a message and can see it just fine on my syslog server. What I can't seem to locate is the windows events. I've attached my config file. Josh _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
