Previously we were using one Logging server. But now we have added one extra Logging server which will also be storing logs received from client . I need to know how to add these two Syslog servers on client's syslog.conf file. So that both syslog servers receive the logs at same time.
Thanks
Best Answer
As you have not specified, and also for the benefit of other readers, I will describe what to do using syslog-ng and rsyslog to have a server logging simultaneously to two remote syslog servers.
If you have syslog-ng logging to a central syslog server, modify /etc/syslog-ng.conf
As an example:
To syslog to a 2nd destination, add:
If running
rsyslog
, then actually it is simpler.The configuration file is /etc/rsyslog.confWhere you find a destination:
you add a 2nd destination:
After changing the configuration, the syslog daemons in the client side need to be restart. Being it respectively,
or
As the syslog daemon sends all messages to all destinations configured, unless you explicitly filter out services or log levels, you do not need to configure anything else [in the client side]. Both will receive exactly the same logs.