Linux Administration Cookbook

Centralizing logging

You don't want to log on to each and every box in your estate to check logs, you just don't. In this age of the cloud and automatically provisioned infrastructure, it's a lot more faff than it's worth, and it's a great case for centralizing your logs in one (redundant) location.

Being data, our logs can be manipulated and moved relatively easily. Both rsyslog and journald have the capability to do this, and, in this section, we're going to be streaming our logs around the place, showcasing how useful this can be.

Everything we cover here will be natively possible in the respective programs; this is different to some of the centralized logging solutions that are provided by software such as the Elastic Stack.

For the purpose ...