FreeBSD

From rsyslog wiki

Rsyslog is present in the FreeBSD ports collection: Rsyslog4. In September, 2009, the rsyslog4 port was updated to version 4.4.1. (First stable version for v4 in ports).

Please report or cc all the problems you have with rsyslog on FreeBSD to the port's maintainer: cristianorolim@hotmail.com

1 Modules
2 Installation
3 Replacing stock syslogd
4 Notes

[edit] Modules

The modules klog, mail, imfile, imtemplate and gnutls come in the main port.

The following modules are packaged as separate (slave) ports.

sysutils/rsyslog4-dbi
sysutils/rsyslog4-gnutls
sysutils/rsyslog4-gssapi
This modules works for FreeBSD 7.0 and above.
sysutils/rsyslog4-mysql
sysutils/rsyslog4-pgsql
sysutils/rsyslog4-relp
sysutils/rsyslog4-rfc3195
sysutils/rsyslog4-snmp

[edit] Installation

To install rsyslog, just run:

#cd /usr/ports/sysutils/rsyslog4
#make install clean

[edit] Replacing stock syslogd

You can use the port as a drop-in replacement for stock syslogd. Follow instructions in package message to make it work seamlessly with newsyslog. It also supports chrooted daemons, such as named, in the same way stock syslogd does.

To start using rsyslogd, stop syslogd if it's running:

/etc/rc.d/syslogd stop

And add the following lines to /etc/rc.conf:

syslogd_enable="NO"
rsyslogd_enable="YES"

newsyslog has the path of syslogd's pid file hardcoded. To make it work seamlessly with rsyslog, add this:

rsyslogd_pidfile="/var/run/syslog.pid"

To disable compatibility mode, add this line too:

rsyslogd_flags="-c4"

Copy /etc/syslog.conf to /usr/local/etc/rsyslog.conf and edit it there, add the following lines to the beginning of the file:

$ModLoad immark.so   # provides --MARK-- message capability
$ModLoad imuxsock.so # provides support for local system logging
$ModLoad imklog.so   # kernel logging