Hello,
I got requirement to modify syslog file to forward syslogs to another linux server.
I never played with syslog file in openSUSE.
I tried to locate syslog.conf file under /etc/ but unable to locate.
Whats the location of syslog.conf in openSUSE?
I need to add following parameters =
*.* @<server_ip>/
to forward syslogs to remote server.
Regards,
Amey.
There is none.
You need to install syslogd first.
Included is also rsyslog (was the default upto 13.1, its configuration is in /etc/rsyslog.conf), or syslog-ng (/etc/syslog-ng/syslog-ng.conf), but there configuration files might be different.
13.2 only uses systemd’s journal by default. Maybe this can do something like you want as well, but I don’t know how you would configure it.
If you install some syslog daemon, this should be started on boot automatically and log all messages according to its configuration.
You might want to disable systemd’s on-disk journal then, to not log everything twice, just remove the directory /var/log/jounal/.
NO syslog.conf in openSUSE.
https://forums.opensuse.org/showthread.php/502494-Location-of-syslog-conf-in-openSUSE-13-2
If you have WORKING rsyslog files and/or directories, and you send me, I will try it.
It is possible that because the SUSE launched an industrial Novell based enterprise system with lots of security restricrions ant those cause this (apparmor, chroot, policykit).
There is no logging to /var/log at all. It is a big security hole in a WAN server. Luck: the firewall and fail2ban works.
Hm?
Why are you linking to this very thread here?
There is no logging to /var/log at all. It is a big security hole in a WAN server. Luck: the firewall and fail2ban works.
Again: just install rsyslog, syslog-ng, or syslogd, and you will have logging to /var/log/.
You might also want to delete the folder /var/log/journal in this case to disable systemd’s journal.
Btw, that’s completely unrelated to SUSE or the use of apparmor, chroot, policykit …
systemd provides its own logging mechanism (journald), and this has become the default on openSUSE (in 13.2) as it makes no sense really to have the same logs twice on your hard disk.