What is included in Linux syslog?

[vnguyen46]

Hi,

On Linux Splunk servers, my system admin set this record in remotesyslog.conf
. @@syslog-zone40.uth.tmc.edu:1514

Anyone knows what type of logs this setup is send to Splunk HF? (os log and application log, or anything else)

Thank you,

[isoutamo]

Hi

Probably same events are sent also to local /var/log/messages and other files under /var/log directory? You should start to look there.

Ismo