# According to ScyllaDb document, For Syslog it mentioned that we can generate logs in CentOS, but I am able to generate it in UBUNTU also. May be Document need to be updated

**URL:** <https://forum.scylladb.com/t/according-to-scylladb-document-for-syslog-it-mentioned-that-we-can-generate-logs-in-centos-but-i-am-able-to-generate-it-in-ubuntu-also-may-be-document-need-to-be-updated/1148>\
**Category:** ScyllaDB\
**Created:** [January 3, 2024, 5:00am UTC](https://forum.scylladb.com/t/according-to-scylladb-document-for-syslog-it-mentioned-that-we-can-generate-logs-in-centos-but-i-am-able-to-generate-it-in-ubuntu-also-may-be-document-need-to-be-updated/1148 "2024-01-03T05:00:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![subrato](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@subrato](https://forum.scylladb.com/u/subrato)\
**Post date:** [January 3, 2024, 5:00am UTC](https://forum.scylladb.com/t/according-to-scylladb-document-for-syslog-it-mentioned-that-we-can-generate-logs-in-centos-but-i-am-able-to-generate-it-in-ubuntu-also-may-be-document-need-to-be-updated/1148/1 "2024-01-03T05:00:55Z")

</div>

Syslog reference Link:

[ScyllaDB Auditing Guide | ScyllaDB Docs](https://enterprise.docs.scylladb.com/branch-2023.1/operating-scylla/security/auditing.html#)

Syslog Configuration I did in rsyslog.conf file in SCYLLADB Please verify also:

```auto
# /etc/rsyslog.conf configuration file for rsyslog
#
# For more information install rsyslog-doc and see
# /usr/share/doc/rsyslog-doc/html/configuration/index.html
#
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf

#################
#### MODULES ####
#################

module(load="imuxsock") # provides support for local system logging
#module(load="immark") # provides --MARK-- message capability

# provides UDP syslog reception
module(load="imudp")
input(type="imudp" port="514")

# provides TCP syslog reception
module(load="imtcp")
input(type="imtcp" port="514")

# provides kernel logging support and enable non-kernel klog messages
module(load="imklog" permitnonkernelfacility="on")

###########################
#### GLOBAL DIRECTIVES ####
###########################

#
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

# Filter duplicated messages
$RepeatedMsgReduction on

#
# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog

#
# Where to place spool and state files
#
$WorkDirectory /var/spool/rsyslog

#
# Include all config files in /etc/rsyslog.d/
#
$IncludeConfig /etc/rsyslog.d/*.conf
$template remote-incoming-logs,"/var/log/%HOSTNAME%/%PROGRAMNAME%.log"
*.* ?remote-incoming-logs
& ~

#Send logs to syslog server
$PreserveFQDN on
*.* @127.0.0.1:514
$ActionQueueFileName queue
$ActionQueueMaxDiskSpace 1g
$ActionQueueSaveOnShutdown on
$ActionQueueType LinkedList
$ActionResumeRetryCount -1

```

I followed this below link for configuring SYSLOG.

> **[How to setup Rsyslog server on Ubuntu 22.04](https://utho.com/docs/tutorial/how-to-setup-rsyslog-server-on-ubuntu-22-04/)**
>
> How to configure rsyslog server on ubuntu 20. Steps to follow. 1- check the availability of rsyslog server. Step 2- open the conf file.

please if anyone have official link for syslog configuration in SCYLLDB then please mention here also.

Below is the image of the syslog which I able to generate in UBUNTU. But In documentation it was mentioned we can only do it in CentOS.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/scylladb/original/1X/722940030e8d9c20e80494b9bb930540a7493b23.png)

 ![image](https://us1.discourse-cdn.com/flex016/uploads/scylladb/original/1X/b7ab7c28aecb70a434f8bdff0036497505703d44.png)