====== Remote Syslog ====== ===== Sending to Graylog rsyslog ===== # cat /etc/rsyslog.d/60.graylog.conf # Send syslog to Graylog *.* @@192.168.5.27:514;RSYSLOG_SyslogProtocol23Format ===== Cisco IOS ===== Set buffer on router to limit message loss logging buffered 51200 warnings service timestamps log datetime msec logging trap notifications logging origin-id hostname logging facility local3 logging 192.168.1.1 logging host 192.168.5.27 transport udp port 11001