View source for Rsyslog Server

1. Save original version of rsyslog.conf<br>
Note: do not overwrite if rsyslog.conf-original already exists, it should already be there from the company image, so this step is normally skipped
 # cp -p /etc/rsyslog.conf /etc/rsyslog.conf-original

2. Update /etc/rsyslog.conf<br>
Make sure the following is enabled/uncommented;
 # Use traditional timestamp format
 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
Add the following line to end of ModLoad/MODULES section;
 # UDP server module
 $ModLoad imudp
 # enable UDP server and port
 $UDPServerRun 514
Add the following line to the beginning of the logging/RULES section (before #kern.* line);
 # log all to mySql
 *.*       :ommysql:127.0.0.1,Syslog,syslog-insert,somepwA

3. Restart rsyslog service
 ENT 7
 # systemctl start rsyslog
 BEFORE Ent 7
 # service rsyslog restart