Lab
A Cloud Guru

Configuring and Managing System Logs in SUSE Linux Enterprise

Log management is a fundamental task that system administrators should be able to perform. The first step on the path to mastery is being able to configure the system to log to the desired locations. In this hands-on lab, we will configure rsyslog to filter certain logs to a location so they can be reviewed.

Try for free Contact sales

Path Info

Level

Beginner

Duration

15m

Published

Jan 10, 2020

Challenge

Configure rsyslog to Send All `local3` Messages to `/var/log/local3evtx` and All `local5` Messages to `/var/log/local5evtx`
1. Change the configuration of rsyslog to route the local3 and local5 logs:
```
sudo vim /etc/rsyslog.conf
```
2. Edit the line that contains the reference to the files.
  
  Change:
```
local2.*;local3.* . -/var/log/localmessages
```
  To:
```
local2.*   -/var/log/localmessages
local3.* . -/var/log/local3evtx
```
  And change:
```
local4.*;local5.* . -/var/log/localmessages
```
  To:
```
local4.*   -/var/log/localmessages
local5.* . -/var/log/local5evtx
```
  Save and write the file.
3. Restart rsyslog:
```
sudo systemctl restart rsyslog
```
Challenge

Use the `logger` Command to Verify the Logs Are Being Routed Correctly
1. Confirm the local3evt and local5evt files do not exist:
```
ls /var/log
```
2. Then have rsyslog route messages to the respective files:
```
sudo logger -p local3.info 'this is a test'
sudo logger -p local5.info 'this is a test'
```
3. Verify the files were both created and contain the test messages:
```
ls /var/log

sudo cat /var/log/local3evtx

sudo cat /var/log/local5evtx
```

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.