...
We need to make sure the Master is setup to receive logs, the following documentation is for rsyslog.
Edit the rsyslog config /etc/rsyslog.conf, make sure it is willing to accept logs, and that the facility used above is going into the slavepoller_event_log
Code Block |
---|
# Provides UDP syslog reception $ModLoad imudp.so $UDPServerRun 514 # Provides TCP syslog reception $ModLoad imtcp.so $InputTCPServerRun 514 #poller NMIS servers use local1 by default, capture that into slave_event.log local1.* /usr/local/nmis8/logs/slavepoller_event.log |
Now make sure rsyslog is running.
...
To run events through escalations before putting them into syslog:
'syslog_use_escalation' => 'true'
No Escalations on events before syslog:
To have events go directly into syslog without escalations
'syslog_use_escalation' => 'false'
Testing
On the poller run:
...
Code Block |
---|
[root@master logs]# tail -f /usr/local/nmis8/logs/slavepoller_event.log Jan 5 10:24:42 demo testsyslog.pl[20840]: NMIS_Event::demo::1420417479,demo,Test Event,Normal,, |
...