I know the remote logging topic has been discussed, but it seems everyone is still channeling the logs from one rsyslogd to another.
There is normally a kernel argument "syslog=logserver.com" to start remote logging right off the bat. Is there anything like that for the VEs? I know that syslog-ng doesn't use as much memory but it still adds up. I also want a central logwatch/fail2ban.
If I specify the syslog argument on the hardware boot, would it apply to the VEs also?
Linux version 2.6.26-2-openvz-amd64 (Debian 2.6.26-21lenny3) (dannf@debian.org) (gcc version 4.1.3 20080704 (prerelease) (Debian 4.1.2-25)) #1 SMP Thu Feb 11 01:40:09 UTC 2010
Thanks.