Ubuntu Send Logs to Syslog Server Port Problem

Özen Özer

2/10/23, 11:47 AM

I have a problem. I configured /etc/rsyslog.conf file to our syslog server. But Ubuntu server send logs to TCP 514 port therefor our syslog server cannot take this logs.

Our config;

# /etc/rsyslog.conf configuration file for rsyslog
#
# For more information install rsyslog-doc and see
# /usr/share/doc/rsyslog-doc/html/configuration/index.html
#
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf

#################
#### MODULES ####
#################

module(load="imuxsock") # provides support for local system logging
#module(load="immark")  # provides --MARK-- message capability

# provides UDP syslog reception
#module(load="imudp")
#input(type="imudp" port="514")
*.*  @10.34.19.5:514

# provides TCP syslog reception
#module(load="imtcp")
#input(type="imtcp" port="514")

# provides kernel logging support and enable non-kernel klog messages
module(load="imklog" permitnonkernelfacility="on")

###########################
#### GLOBAL DIRECTIVES ####
###########################

#
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

# Filter duplicated messages
$RepeatedMsgReduction on

#
# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755

Our syslog server only work udp 514 but i see under firewall tcp/514 How i change ubuntu send logs port to udp ?

enter image description here

129

0 + 0

server

rsyslog

David

2/10/23, 11:53 AM

There is no need for all the caps and it makes the question harder to read. Also the 6 lines under our config do not add anything. What are they supposed to be?

Rinzwind

2/10/23, 11:56 AM

@David # is a formatting symbol on AU ;)

David

2/10/23, 12:03 PM

I know what # is I do not know what point you are trying to make.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Ubuntu Send Logs to Syslog Server Port Problem

TH: Ubuntu ส่งบันทึกไปยังปัญหาพอร์ตเซิร์ฟเวอร์ Syslog

RO: Ubuntu Trimite jurnalele la portul serverului Syslog Problemă

RU: Проблема с отправкой журналов Ubuntu на сервер Syslog

VI: Ubuntu gửi nhật ký tới cổng máy chủ Syslog Sự cố

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.