Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm trying to setup a syslog server but it doesn't appear to be working as intended. My client does not seem to be logging to it.

Server Ubuntu 12.04 (

Client Ubuntu 14.04 (

Server Config /etc/rsyslog.conf:

$ModLoad imuxsock 
$ModLoad imklog  
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

$RepeatedMsgReduction on
$FileOwner syslog
$FileGroup adm

$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022

$WorkDirectory /var/spool/rsyslog

$IncludeConfig /etc/rsyslog.d/*.conf

$template TmplAuth, "/var/log/%HOSTNAME%/%PROGRAMNAME%.log"

I did chown syslog:syslog on the /var/log directory and subdirectories.

Client Config /etc/rsyslog.conf:

Added this to the top of the conf file

*.* @

Restarted rsyslog daemon on both hosts, however no logs seem to be populating on the server in /var/logs

Any thoughts on what I may be doing wrong?

share|improve this question
Perform a packet capture on the server (and probably the client) to see if logs are being forwarded properly. –  EEAA Jul 1 '14 at 20:26
Verify your config with rsyslogd -f /etc/rsyslog.conf -N1,also try to run rsyslog in debug mode. Stop the daemon and start with /sbin/rsyslogd -c3 -dn > logfile –  b13n1u Jul 1 '14 at 20:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.