thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Systems & Data Center · Intermediate

rsyslog

A widely used Linux syslog daemon that writes log messages to files and can forward them to remote log servers.

Definition

rsyslog uses facility.priority selectors in /etc/rsyslog.conf and /etc/rsyslog.d to route messages, for example to /var/log/messages or /var/log/secure. It can forward over UDP or TCP 514, or TLS, to a central collector or SIEM.

Example

*.* @@logserver.example.com:514 forwards all messages over TCP.

Exam tip

In rsyslog forwarding rules, a single @ means UDP and @@ means TCP.

Related terms