NGINX Cookbook

Remote syslog

While we can generate a bit more flexibility using a local syslog daemon, generally, the reason we want to offload the logging is to either decrease the load on our production systems or to use external tools for better log analysis.

The simplest way to do this is to send the logs to a syslog daemon or processing system that doesn't exist on the same server. This can also be used to aggregate logging from multiple servers, which facilitates monitoring and reporting in a central location.

To send the logs to a remote server, firstly, we need to enable the syslog server to listen on a network port. This is disabled on most rsyslog-based systems, so that it prevents accidental security issues. To enable, we simply uncomment the ...