syslogd/doc/rsyslog-auth.md

17 lines
422 B
Markdown

# rsyslog
Configure rsyslog to forward authentication messages to a remote logging solution. We use *10.32.64.1* as our remote syslog server in this example.
Create a file new file in the **/etc/rsyslog.d** folder (eg. *90-auth.conf*) with the following content:
```text
# Log authentication messages to remote host
auth.*,authpriv.* @10.32.64.1
```
Restart the rsyslog service
```shell
systemctl restart rsyslog
```