|
|
EELS can be configured to enable remote systems to send their messages to a central log server for logging. The EELS daemon listens for connection requests from remote RTLSPs that are configured to send their messages to a central EELS daemon. When the EELS daemon receives a TCP/IP connection request from a remote RTLSP it spawns a local RTLSP to read the incoming messages and log them to a local database. When the EELS daemon accepts a connection from a remote host, it looks in /etc/default/eels for an accept-remote configuration block with a hostname line that matches the IP address or hostname of the remote system. If a match is found, the incoming log messages are logged to the database specified in the destination sink parameter of the configuration block.
If an accept-remote configuration block is not found with a matching IP address or hostname, the connection is dropped. This prevents unauthorized hosts from logging messages on the central log server.
For more information, see ``Remote logging''.