CENTRALIZED LOGGING

This is done on your NOC (10.X.2.1)

1. To setup your NOC machine to be the centralized logging server do the following.

   edit /etc/rsyslog.conf by uncommenting

   $ModLoad imudp
   $UDPServerRun 514

   then restart the logging service

   service rsyslog restart

2. To check that the logging service is running and listening do

   netstat -an | grep :514

   If your firewall is running (iptables) check iptables that UDP port 514 is open.

# SYSLOG
-A RH-Firewall-1-INPUT -p udp -m udp --dport 514 -j ACCEPT

3. You now have a centralized log server. You may want to peruse "man logrotate"
   and the contents of directory /etc/rsyslog.d/ to fine tune your logging setup.