Mastering Linux Security and Hardening - Second Edition

Understanding rsyslog

The old syslog logging system was created back in the 1980s for use on Unix and other Unix-like systems. It finally saw its last days in the Linux world only a few years ago. Nowadays, we use rsyslog, which is a bit more robust and has a few more features. It works mainly the same on both Debian-based and Red Hat-based distros, with only some differences in how the configuration files are set up. But, before we look at the differences, let's look at what's the same.