How can mikrotik send log to rsyslog? How do I configure rsyslog.conf?
For rsyslog:
# provides UDP syslog reception
module(load="imudp")
input(type="imudp" port="514")
(probably these lines already exist in /etc/rsyslog.conf but are commented out)
1 Like
An important detail is missing there. If you want the rsyslog server use the syslog facility to filter messages (for example to write MikroTik messages to a specific log file), you must set the remote log format to syslog.
/system logging action
set [find name="remote"] remote-log-format=syslog
The default log format does not include the syslog facility (RouterOS 7.18.2).
There are different options. It depends on how you want to configure rsyslog.