The Rsyslog Missing Manual

Rsyslog is an excellent syslog server used by default in many Linux distributions. Written in C, it’s faster, more efficient, and generally more reliable than the larger, more featureful log forwarders. Unfortunately its documentation is both sparse and often wrong, especially for the older 7.x release series preferred by distributions.

This is an attempt by a third party to address that flaw by providing a complete and accurate manual. The information presented in this manual comes primarily from reading the Rsyslog source code. This documentation project is not affiliated with Rainer Gerhards or the Rsyslog project.

Contents

• Configuration
  • Syntax
  • Conditionals
• GNU Free Documentation License

Indices and tables

• Index
• Search Page

Legal Notices

Copyright © 2016 Sam Hanes

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.

There is no warranty for the document, to the extent permitted by applicable law. Except when otherwise stated in writing the copyright holders and/or other parties provide the document “as is” without warranty of any kind, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. The entire risk as to the quality and performance of the document is with you. Should the document prove defective, you assume the cost of all necessary servicing, repair or correction.

In no event unless required by applicable law or agreed to in writing will any copyright holder, or any other party who modifies and/or conveys the document as permitted above, be liable to you for damages, including any general, special, incidental or consequential damages arising out of the use or inability to use the document (including but not limited to loss of data or data being rendered inaccurate), even if such holder or other party has been advised of the possibility of such damages.