Here's how to forward syslog to RealSecure agent.

Where is the Syslog File?
/etc/syslog.conf

What do I need to change or add?
1. Verify the Systems Agent Hostname and IP Exists in /etc/hosts
2. Edit syslog.conf file.add the following line
auth.notice @rshostmachine
*.info @rshostmachine
3. Restart the syslog Daemon using the following:
ps -ef | grep syslogd
kill -HUP
All Syslog messages sent to Agent in ClearText
- Certicom is not used when sending Syslog
Should only Send Info related to Signatures
- Syslog has numerous options:
*.emerg;*.alert;*.crit;*.err;*.warning;*.notice;*.info;*.debug
Syslog is not accounted for in the License Key
Credits:--Audra