jumphost icon indicating copy to clipboard operation
jumphost copied to clipboard

Network logging with rsyslogd

Open osresearch opened this issue 3 years ago • 1 comments

Should have a demo of how to do network logging so that the system doesn't need a console.

osresearch avatar Mar 21 '22 17:03 osresearch

sysklogd is a fairly small logger and seems to work. This is enough in /etc/syslogd to send it to outside machines:

*.* /dev/console
*.* @safeboot:9999 ; RFC5424

busybox also has a syslogd with a very simple -R host:port format. The downside is that for appliances that do not want a shell, busybox might be too much attack surface. A specialized version could be built with only the logger, although that seems like a bit of a waste... (and not much of a savings - busybox with only syslogd enabled is still 84 KB, while sysklogd is 63KB)

osresearch avatar Mar 21 '22 19:03 osresearch