2021-03-24 07:05:14 +00:00
|
|
|
# rsyslog
|
|
|
|
|
|
|
|
|
|
Configure rsyslog to forward authentication messages to a remote logging solution. We use *10.32.64.1* as our remote syslog server in this example.
|
|
|
|
|
|
|
|
|
|
Create a file new file in the **/etc/rsyslog.d** folder (eg. *90-auth.conf*) with the following content:
|
|
|
|
|
|
|
|
|
|
```text
|
|
|
|
|
# Log authentication messages to remote host
|
2021-03-24 10:10:19 +00:00
|
|
|
auth.*,authpriv.* @10.32.64.1
|
2021-03-24 07:05:14 +00:00
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Restart the rsyslog service
|
|
|
|
|
|
|
|
|
|
```shell
|
2021-03-24 10:10:19 +00:00
|
|
|
systemctl restart rsyslog
|
2021-03-24 07:05:14 +00:00
|
|
|
```
|
