FreeBSD

RSyslog is present in the FreeBSD ports collection: Rsyslog7. In May, 2013, the rsyslog7 port was updated to version 7.2.7.

Please report or cc all the problems you have with RSyslog v7 on FreeBSD to the port's maintainer.

Modules

The modules imfile, mail, imdiag, impstats and omstdout come as default options in port.

The following modules are provided as options in the port:

• DBI

  LibDBI output module for rsyslog

• GNUTLS

  GNUTLS module for rsyslog

• GSSAPI

  GSS API input/output module for rsyslog

• MYSQL

  MySQL output module for rsyslog

• PGSQL

  PostgreSQL output module for rsyslog

• RELP

  RELP input/output module for rsyslog

• RFC3195

  RFC3195 input support for rsyslog

• SNMP

  SNMP trap sender for rsyslog

Installation

To install rsyslog, just run:

#cd /usr/ports/sysutils/rsyslog7
#make install clean

Replacing stock syslogd

You can use the port as a drop-in replacement for stock syslogd. Follow instructions in package message to make it work seamlessly with newsyslog. It also supports chrooted daemons, such as named, in the same way stock syslogd does.

To start using rsyslogd, stop syslogd if it's running:

/etc/rc.d/syslogd stop

And add the following lines to /etc/rc.conf:

syslogd_enable="NO"
rsyslogd_enable="YES"

newsyslog has the path of syslogd's pid file hardcoded. To make it work seamlessly with rsyslog, add this:

rsyslogd_pidfile="/var/run/syslog.pid"

Create the file /usr/local/etc/rsyslog.conf and, for a basic initial file put this content in it:

$ModLoad immark.so   # provides --MARK-- message capability
$ModLoad imuxsock.so # provides support for local system logging
$ModLoad imklog.so   # kernel logging

*.*     /var/log/messages
*.*     ~

Notes

• The port is ready for production environments.
• This example was writing for FreeBSD 9.1-RELEASE
• Note the time this was written: --Cristiano Rolim, 27 May 2013