I just enhanced my logging with rsyslog by enabling remote logging form other machines and here are the config sniplets:
\non <\/p>\n
$AllowSender TCP, 127.0.0.1, $template REMOTE,\"\/var\/log\/system-%HOSTNAME%.log\" # template to seperate logfiles received from remote hosts And now to the encryption. On server side the following directivs are necessary: # certificate files $ModLoad imtcp # load TCP listener<\/p>\n $InputTCPServerStreamDriverMode 1 # run driver in TLS-only mode # set up the action I just enhanced my logging with rsyslog by enabling remote logging form other machines and here are the config sniplets: on logging server side $ModLoad imtcp # enable TCB module $InputTCPServerRun # bind rsyslog remote logging to specific port $AllowSender TCP, 127.0.0.1, \/ # restrict access to specified network $template REMOTE,”\/var\/log\/system-%HOSTNAME%.log” # template to seperate … Continue reading rsyslog – remote logging including TLS encryption<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[],"class_list":["post-212","post","type-post","status-publish","format-standard","hentry","category-configs"],"_links":{"self":[{"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=\/wp\/v2\/posts\/212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=212"}],"version-history":[{"count":0,"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=\/wp\/v2\/posts\/212\/revisions"}],"wp:attachment":[{"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/olkn.myvnc.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n$ModLoad imtcp # enable TCB module
\n$InputTCPServerRun
\nif $fromhost-ip startswith '
\n#&~ # do not discard messages because we wont to keep all
\n<\/code>
\nand on<\/p>\nclient side<\/ul>\n
\n$ModLoad imtcp # enable TCP module for rsyslog
\n*.* @@
\n<\/code>
\n
Do not forget to adjust the firewall settings in order to allow remote access to the specified port.<\/p>\n
\n# make gtls driver the default
\n$DefaultNetstreamDriver gtls<\/p>\n
\n$DefaultNetstreamDriverCAFile \/path\/to\/contrib\/gnutls\/ca.pem
\n$DefaultNetstreamDriverCertFile \/path\/to\/contrib\/gnutls\/cert.pem
\n$DefaultNetstreamDriverKeyFile \/path\/to\/contrib\/gnutls\/key.pem<\/p>\n
\n$InputTCPServerStreamDriverAuthMode anon # client is NOT authenticated
\n$InputTCPServerRun 10514 # start up listener at port 10514
\n<\/code>
On client side only the following directives are necessary:
\n# certificate files - just CA for a client
\n$DefaultNetstreamDriverCAFile \/path\/to\/contrib\/gnutls\/ca.pem<\/p>\n
\n$DefaultNetstreamDriver gtls # use gtls netstream driver
\n$ActionSendStreamDriverMode 1 # require TLS for the connection
\n$ActionSendStreamDriverAuthMode anon # server is NOT authenticated
\n*.* @@(o)server.example.net:10514 # send (all) messages<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"