https://my-it-blog.netlify.app/tags/centralized-logging/ Recent content in Centralized-Logging on My IT Journal Hugo en-us Thu, 04 Jun 2026 00:00:00 +0000 https://my-it-blog.netlify.app/posts/rsyslog-centralized-logging/ Thu, 04 Jun 2026 00:00:00 +0000 https://my-it-blog.netlify.app/posts/rsyslog-centralized-logging/ <h2 id="objective">Objective</h2> <p>Build a centralized logging environment where:</p> <ul> <li>SERVER receives logs from client1</li> <li>SERVER receives logs from client2</li> <li>Logs are stored in separate files: <ul> <li>/var/log/client1.log</li> <li>/var/log/client2.log</li> </ul> </li> </ul> <hr> <h2 id="network-layout">Network Layout</h2> <table> <thead> <tr> <th>Host</th> <th>IP</th> </tr> </thead> <tbody> <tr> <td>server</td> <td>192.168.10.10</td> </tr> <tr> <td>client1</td> <td>192.168.10.101</td> </tr> <tr> <td>client2</td> <td>192.168.10.102</td> </tr> </tbody> </table> <h2 id="environment">Environment</h2> <ul> <li>OS: Ubuntu</li> <li>Tools: rsyslog</li> </ul> <hr> <h2 id="part-1---configure-the-rsyslog-server">Part 1 - Configure the rsyslog Server</h2> <h3 id="verify-rsyslog">Verify rsyslog</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo systemctl status rsyslog </span></span></code></pre></div><p><img alt="rsyslog_status" loading="lazy" src="https://my-it-blog.netlify.app/posts/rsyslog-centralized-logging/server_rsyslog_status.png"></p> <h3 id="enable-udp-syslog-reception-and-restart-the-rsyslog-service">Enable UDP Syslog reception and restart the rsyslog service</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo nano /etc/rsyslog.conf </span></span><span style="display:flex;"><span>sudo systemctl restart rsyslog </span></span></code></pre></div><p><img alt="udp_enabled" loading="lazy" src="https://my-it-blog.netlify.app/posts/rsyslog-centralized-logging/udp_enabled.png"></p>