Remote log forwarding does not work

[Kauser]

Dear Concern,

We've enabled log forwarding to remote server from syslog.conf and restart syslogd service but remote host doesn't receieve the log. Please assist us to check if there is any issue from host side. Configuration file is as below.

bash-4.3# cat /etc/syslog.conf|grep -v "#"
mail.debug              /var/adm/syslog/mail.log
*.info;mail.none        /var/adm/syslog/syslog.log
*.alert                 /dev/console
*.alert                 root
*.emerg                 *
*.debug         @10.75.10.165

*.info;mail.err;mark.none       /var/log/ids_syslog.pipe
bash-4.3#

 With Best Regards,

Kauser

[Duncan Edmonstone · Accepted solution]

Common problem with syslog.conf is having spaces in the file instead of tabs - run:

cat -t /etc/syslog.conf

Ignoring the comment lines, the only thing between the selectors and actions in the file should be tabs. Here's my file:

# cat -t /etc/syslog.conf
# @(#)B.11.11_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug^I^I/var/adm/syslog/mail.log
*.info;mail.none^I/var/adm/syslog/syslog.log
*.alert^I^I^I/dev/console
*.alert^I^I^Iroot
*.emerg^I^I^I*