Linux Administration Cookbook

centos2

Use the following rsyslog change to start forwarding centos2 logs to Logstash of the centos1 instance:

$ sudo sed -i 's/#*.* @@remote-host:514/*.* @192.168.33.10:5000/g' /etc/rsyslog.conf$ sudo systemctl restart rsyslog

I recommended rebuilding the VMs earlier, but if you haven't, the preceding command may need tweaking if you followed the earlier sections about remote syslog configuration. Open the file and confirm the line looks as you expect.

You can test your configuration by using the following on centos2:

$ logger -p syslog.err "Digimon was better than Pokemon."