Environment: Both the client and the server need to install the Rsyslog service
-rsyslogserver End of Springboard machine
/etc/rsyslog.d/server.conf$modload Imtcp$inputtcpserverrun 514/etc/rsyslog.conflocal4.*/var/log/histo Ry.logsudo Service Rsyslog Restart
Client-rsyslogclient Side
/etc/rsyslog.d/client.conflocal4.* @@ Your shipment Wie: 514
Eth0 Network card Changes according to the situation
/etc/profile.d/client.shexport prompt_command= ' {msg=$ (History 1 | {read x y; echo $y;}); Logger-p local4.info ["local| ' grep ipaddr/etc/sysconfig/network-scripts/ifcfg-eth0|sed ' s/IPADDR=//g '"--"SSH| $SSH _connection $SSH _tty "--" user| $USER "--" pwd| $PWD "]:" $msg "; }‘
Restart Service
Service Rsyslog Restart
This article from "Do not abandon!" Do not give up "blog, be sure to keep this source http://thedream.blog.51cto.com/6427769/1720502
Increased operations audit to local