Today I was setting up centralised syslogging at work to some plain old syslogd server. I’ve only really setup up centralised syslogging with syslog-ng before.
Anyway, in the syslogd man page, is said to send the syslogs of a server to both the central syslog server and locally, with entries like this in /etc/syslog.conf:
*.info;mail.none;authpriv.none;cron.none /var/log/messages,@hostname
For some reason that didn’t work at all. Depending on how I did it, it either only went to the central syslog server, or it just wouldn’t log at all. I ended up having to do it like this:
*.info;mail.none;authpriv.none;cron.none /var/log/messages
*.info;mail.none;authpriv.none;cron.none @hostname
I managed to find that piece of information on the LinuxSA mailing list.