The documentation at http://observium.org/docs/syslog/#rsyslogd looks kind of outdated. The syntax for rsyslog configuration changed in version 7 which is already outdated. Version 8.x is stable at the moment. As some things didn't work with the documented config I changed it like this:
#---------------------------------------------------------
|
#send remote logs to observium
|
|
template(name="observium"
|
type="string"
|
string="%fromhost-ip%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$year%-%$month%-%$day% %timereported:8:25%||%msg%||%programname%\n")
|
|
$ModLoad omprog
|
|
# rsyslog Input Modules
|
input(type="imudp"
|
port="514"
|
ruleset="observium")
|
|
# rsyslog RuleSets
|
ruleset(name="observium") {
|
action(type="omprog"
|
binary="/opt/observium/syslog.php"
|
template="observium")
|
action(type="omfile"
|
file="/opt/rsyslog/remote.log")
|
}
|
*.* stop
|
#---------------------------------------------------------
|
Help
Trivial