Remote syslogging

Today I was setting up centralised syslogging at work to some plain old syslogd server. I’ve only really setup up centralised syslogging with syslog-ng before.

Anyway, in the syslogd man page, is said to send the syslogs of a server to both the central syslog server and locally, with entries like this in /etc/syslog.conf:

*.info;mail.none;authpriv.none;cron.none /var/log/messages,@hostname

For some reason that didn’t work at all. Depending on how I did it, it either only went to the central syslog server, or it just wouldn’t log at all. I ended up having to do it like this:

*.info;mail.none;authpriv.none;cron.none /var/log/messages
*.info;mail.none;authpriv.none;cron.none @hostname

I managed to find that piece of information on the LinuxSA mailing list.