Enhanced Logging With rsyslog - Loggin external hosts

[fast Hackem]

Hello,
Inregards to this howto - http://www.howtoforge.com/logging_wi...on_debian_etch

I was wondering how do I set it up to accept syslog messages from other hosts?

I've tried this in /etc/rsyslog.conf with no luck

*.* @192.168.0.200:514

[falko]

I think you must modify /etc/rsyslog.conf, e.g. like this:

*.*       >192.168.0.200,rsyslog,rsyslog_user,rsyslog_user_password

[fast Hackem]

Tried those settings, however I get this message

db error (2003): Can't connect to MySQL server on '192.168.0.200' (4)

Does this mean that I need to create table for this host ?

[fast Hackem]

Update: (I thought that I had found the problem)
I tried to enable logging from remote hosts first, by adding in the -r option
in /etc/init.d/rsyslog
RSYSLOGD_OPTIONS="-m 0 -r"

then Restarted rsyslog

Still no messages from other hosts.

So I removed the following
*.* >192.168.0.200,rsyslog,rsyslog_user,rsyslog_user_p assword

still no luck.

[fast Hackem]

May have solved this one !?

I skipped this step
vi /etc/default/rsyslog

Also had to enter in the -r option here.

[falko]

Originally Posted by fast Hackem

Tried those settings, however I get this message

db error (2003): Can't connect to MySQL server on '192.168.0.200' (4)

Does this mean that I need to create table for this host ?

Make sure that the client system is allowed to log in to the MySQL server on 192.168.0.200. Also, the MySQL server must use TCP and listen on all interfaces and on port 3306. What's the output of

netstat -tap|grep mysql

on 192.168.0.200?