Page History

...

We need to make sure the Master is setup to receive logs, the following documentation is for rsyslog. 
Edit the rsyslog config /etc/rsyslog.conf, make sure it is willing to accept logs, and that the facility used above is going into the slavepoller_event_log

# Provides UDP syslog reception
$ModLoad imudp.so
$UDPServerRun 514

# Provides TCP syslog reception
$ModLoad imtcp.so
$InputTCPServerRun 514

#poller NMIS servers use local1 by default, capture that into slave_event.log
local1.*                                                /usr/local/nmis8/logs/slavepoller_event.log

Now make sure rsyslog is running. 

...

To run events through escalations before putting them into syslog:
'syslog_use_escalation' => 'true'

No Escalations on events before syslog:

To have events go directly into syslog without escalations
'syslog_use_escalation' => 'false'

This will use the Common-events model to determine which events should be sent as syslogs, by default all events will be sent, except for some of those events for deleted interfaces, etc.

Testing

On the poller run: 

...

[root@master logs]# tail -f /usr/local/nmis8/logs/slavepoller_event.log
Jan  5 10:24:42 demo testsyslog.pl[20840]: NMIS_Event::demo::1420417479,demo,Test Event,Normal,,

...