Configure and manage the rsyslog system logging daemon.
medium risk
rsyslog is the high-performance system logging daemon used on most Linux distros alongside or instead of systemd's journald. It processes logs using rules (facility.severity → destination) and can forward logs to remote servers. Config files live in /etc/rsyslog.conf and /etc/rsyslog.d/.
systemctl status rsyslogCheck rsyslog service status · explain & risk-check →rsyslogd -N1Validate rsyslog config without restarting · explain & risk-check →logger -t test 'Hello rsyslog' && tail -5 /var/log/syslogSend test message and verify delivery · explain & risk-check →grep '*.error' /etc/rsyslog.confCheck where error-level messages are routed · explain & risk-check →echo '*.* @@192.168.1.100:514' > /etc/rsyslog.d/99-remote.conf && systemctl restart rsyslogForward all logs to remote syslog server via TCP · explain & risk-check →Use `rsyslogd -N1` to validate config before restarting — a syntax error in rsyslog.conf silently stops all logging, which you'll only notice during an incident.
Reference text is hand-written and may be incomplete — check man rsyslog for your version. Test destructive commands on a non-production system first.