The Book

The Book
OverviewWhat is Rsyslog?
Message flow in rsyslogInput
Message Transformation
OutputOutput format: Templates
Installing and configuring RsyslogInstalling from packages
Installing from sources
Create your first Rsyslog setup
Configuration formatRainerScript format
Legacy configuration format (deprecated)
Why is there two different formats?
Input: from where come the logs
OutputWhat should be loggedMessage properties
System properties
Variables
Functions
Transformation Modules
When should be loggedFilter Conditions
Rulesets
How should be loggedRainerScript templates
Legacy format templates
Properties in templates
Conditionally choosing a template
Where should be send: Output Modules
Queues: prepare for the worstWhat are queues?In-memory queues
Disk queues
Disk-assisted queues
Main message queue
Action queues
SecuritySecuring your setup
Dropping privileges
Extending rsyslogNative plugins
External plugins
See also
Help with configuring/using Rsyslog:
Mailing list - best route for general questions
GitHub: rsyslog source project - detailed questions, reporting issues
that are believed to be bugs with Rsyslog
See also
Contributing to Rsyslog:
Source project: rsyslog project README.
Documentation: rsyslog-doc project README
Copyright 2008-2023 Rainer Gerhards (Großrinderfeld),
and Others.