RSYSLOG configuration in Suse

We install RSYSLOG If we don't have it already installed:

zypper install rsyslog

We access the configuration file /etc/sysconfig/syslog and we must search and modify the following lines:

SYSLOG_DAEMON=»rsyslogd»

RSYSLOGD_COMPAT_VERSION=»4″

We add the configuration in /etc/rsyslog.d/90-graylog2.conf (In my case I am using graylog)

$template GRAYLOGRFC5424,»%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msg%\n»

*.* @192.168.1.111:514;GRAYLOGRFC5424

We restart the service

rcsyslog restart

All the best

:wq!