How long does it realistically take to onboard a new log source?
I'm trying to get a realistic baseline for log-source onboarding. We use a central rsyslog server that receives logs from the whole estate. After taking over another site,…
rsyslog
How can I organize Windows Event Forwarder logs with dynamic rsyslog files?
I'm collecting Windows server events on an openSUSE Leap 16 syslog server running rsyslog. The events arrive through SolarWinds Event Log Forwarder for Windows. I'd like rsyslog to…
How Is rsyslog Used Alongside journald in Modern Linux Environments?
I've been studying rsyslog, but I'm still trying to understand how it is actually used in production environments. My current understanding is that rsyslog is mainly a log…
Need Help with Rsyslog Forwarding Configuration
I'm working with RHEL 10 and trying to set up rsyslog to forward specific log files to a central server. The files I'm focusing on are /var/log/messages, /var/log/sssd.log,…
Where Should I Place Rsyslog Certificate Files?
I've got three certificate files (CA, server, and key) that I've set up according to the official rsyslog documentation. My configuration file looks something like this: ``` global(…