0

We can forward syslogs to syslog server by making the below entry in syslog.conf/rsyslog.conf

*.*<space/tab>@<syslog_server_name>:<port_no>

However, this only sends new syslogs, which are generated after making this entry. But I want to send old syslogs also that are generated before making this entry. Is there any way to send old/historic syslogs to syslog server?

1 Answer 1

0

You can configure rsyslog to read from existing files, for example:

module(load="imfile" PollingInterval="10")

input(type="imfile"
      File="/var/log/apache2/*access.log"
      Tag="apache2-access"
      Severity="info"
      Facility="local6")

docs: https://rsyslog.readthedocs.io/en/latest/configuration/modules/imfile.html

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .