Syslog-ng central

Server

source src {
#
# include internal syslog-ng messages
# note: the internal() soure is required!
#
internal();

#
# the default log socket for local logging:
#
unix-dgram("/dev/log");

#
# uncomment to process log messages from network:
#
udp(ip("192.168.20.192") port(514));
tcp(ip("192.168.20.192") port(5140) keep-alive(yes));
};


Cliente Linux

# Enviem els logs al syslog central
destination centraloghost {
tcp("192.168.20.192" port(5140));
};
log {
source(src);
destination(centraloghost);
};

Como instalar rsyslog en opensuse 11

zypper install rsyslog

/etc/init.d/syslog stop
Editar el fichero /etc/sysconfig/syslog y cambiar las siguientes opciones

SYSLOG_DAEMON="rsyslog" 

Reiniciar el syslog daemon:

/etc/init.d/syslog start