Install remote syslog server
vi /etc/rsyslog.conf
# provides UDP syslog reception module(load="imudp") input(type="imudp" port="514") # provides TCP syslog reception module(load="imtcp") input(type="imtcp" port="514")
restart syslog server
service syslog restart
check config
netstat -tulpn | grep rsyslogd
tcp 0 0 0.0.0.0:514 0.0.0.0:* LISTEN 18785/rsyslogd tcp6 0 0 :::514 :::* LISTEN 18785/rsyslogd udp 0 0 0.0.0.0:514 0.0.0.0:* 18785/rsyslogd udp6 0 0 :::514 :::* 18785/rsyslogd