Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Centos 5.x

I'd like to have my syslog traffic use TCP instead of UDP.

Does the stock syslog daemon for CentOS support this? If so, where would I set that option?

-M

share|improve this question

2 Answers 2

up vote 1 down vote accepted

I believe tht the stock syslog daemon on Centos5 does not support this. Also note that port 514/tcp was reserved for 'shell' access, but I think that is deprecated going forward.

Check out rsyslog, which has become the default syslog daemon in Ubuntu and RedHat 6 beta (and Centos 6). It can read your existing syslog.conf without any changes, and can also be extended quiet a bit. It also supports syslog over tcp.

I found that syslog-ng is better documented and has more community examples. However, the syntax for rsyslog.conf is more similar to the syntax of syslog.conf . If you use syslog-ng, then feel free to stick with syslog-ng. If you have some existing syslog.conf's, then check out rsyslog.

On my Ubuntu system, I dropped in my old syslog.conf into /etc/rsyslog.d/50-default.conf and it worked right away. Later, I was able to add several of my own features, such as storing remote syslogs at /var/log/syslogs/$REMOTE_HOST/$FACILITY.log.


Update 20110524:

For more information on this, see http://tools.ietf.org/html/rfc5426 , which specifically recommends syslog over TLS.

share|improve this answer

It may be worthwhile to take a look at syslog-ng which does support TCP (and is a better solution overall).

http://freshmeat.net/projects/syslog-ng/

share|improve this answer
    
Thanks. Yea from what I could find out online, the stock syslogd just doesn't support it period. How does rsyslog compare to syslog-ng? –  Mike B Aug 6 '10 at 22:46
    
I prefer rsyslogd, and there's a comparisson on rsyslogd site: rsyslog.com/doc/rsyslog_ng_comparison.html –  coredump Aug 10 '10 at 19:10

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.