From 6995722aa12cfd5f19e7a0196777ac03fdfffeef Mon Sep 17 00:00:00 2001
From: root <root@rsyslog.dvirlabs.com>
Date: Mon, 13 Apr 2026 00:46:33 +0000
Subject: [PATCH] initial rsyslog config

---
 rsyslog.conf          | 59 +++++++++++++++++++++++++++++++++++++++++++
 rsyslog.d/30-lab.conf |  1 +
 2 files changed, 60 insertions(+)
 create mode 100644 rsyslog.conf
 create mode 100644 rsyslog.d/30-lab.conf

diff --git a/rsyslog.conf b/rsyslog.conf
new file mode 100644
index 0000000..e2cca72
--- /dev/null
+++ b/rsyslog.conf
@@ -0,0 +1,59 @@
+# /etc/rsyslog.conf configuration file for rsyslog
+#
+# For more information install rsyslog-doc and see
+# /usr/share/doc/rsyslog-doc/html/configuration/index.html
+#
+# Default logging rules can be found in /etc/rsyslog.d/50-default.conf
+
+
+#################
+#### MODULES ####
+#################
+
+module(load="imuxsock") # provides support for local system logging
+#module(load="immark")  # provides --MARK-- message capability
+
+# provides UDP syslog reception
+#module(load="imudp")
+#input(type="imudp" port="514")
+
+# provides TCP syslog reception
+#module(load="imtcp")
+#input(type="imtcp" port="514")
+
+# provides kernel logging support and enable non-kernel klog messages
+module(load="imklog" permitnonkernelfacility="on")
+
+###########################
+#### GLOBAL DIRECTIVES ####
+###########################
+
+#
+# Use traditional timestamp format.
+# To enable high precision timestamps, comment out the following line.
+#
+$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
+
+# Filter duplicated messages
+$RepeatedMsgReduction on
+
+#
+# Set the default permissions for all log files.
+#
+$FileOwner syslog
+$FileGroup adm
+$FileCreateMode 0640
+$DirCreateMode 0755
+$Umask 0022
+$PrivDropToUser syslog
+$PrivDropToGroup syslog
+
+#
+# Where to place spool and state files
+#
+$WorkDirectory /var/spool/rsyslog
+
+#
+# Include all config files in /etc/rsyslog.d/
+#
+$IncludeConfig /etc/rsyslog.d/*.conf
diff --git a/rsyslog.d/30-lab.conf b/rsyslog.d/30-lab.conf
new file mode 100644
index 0000000..c50922a
--- /dev/null
+++ b/rsyslog.d/30-lab.conf
@@ -0,0 +1 @@
+local0.*    /var/log/lab.log