{{indexmenu_n>8}} ======Log Management with rsyslog====== rsyslog is a service for managing system logs. It works as a daemon, providing tools to collect messages and send them to a storage location. Functions of rsyslog: * Receive messages * Filter and sort messages — determine their priority and type * Store messages — write them to specific files or forward them to a remote server The system is highly configurable: you can set it to save any type of message to any file.\\ rsyslog can receive and transmit logs over the **syslog** protocol across a network, using both TCP and UDP through the standard port 514. Scripts for integrating SCAT logs with syslog and systemd units for their execution: * ''parser.bash'' — monitors SCAT logs and converts them to rsyslog format using the logger module. * ''bng_logmon.service'' — systemd units to launch the scripts. * ''bng.conf'' — an example configuration for sending logs to a remote server, which can be used as is or modified for more flexible settings. =====Requirements===== * A running fastdpi process — it generates log entries, required for the SSG message-sending scripts. * A running rsyslog daemon. =====Installation===== - Install ''bnglogmon'':yum install bnglogmon - Edit the file ''/etc/rsyslog.d/bng.conf'' — specify the server address and the sender’s IP address (if necessary, provide a specific IP). - Enable automatic startup of ''bnglogmon'' at system boot:systemctl enable bnglogmon.service =====Execution===== - Start bnglogmon:systemctl start bnglogmon.service - Restart rsyslog:systemctl restart rsyslog.service =====Configuration===== The rsyslog daemon is configured according to the settings described in its [[https://www.rsyslog.com/doc/index.html|official documentation]].