{"id":1145,"date":"2019-12-09T05:27:38","date_gmt":"2019-12-08T22:27:38","guid":{"rendered":"https:\/\/www.linuxid.net\/post\/?p=1145"},"modified":"2025-04-18T15:21:23","modified_gmt":"2025-04-18T08:21:23","slug":"cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04","status":"publish","type":"post","link":"https:\/\/www.linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/","title":{"rendered":"Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04"},"content":{"rendered":"<p>File log sangat berguna untuk menganalisis dan mengatasi masalah apa pun yang terkait dengan sistem dan aplikasi di Linux. Secara default, semua file log berada di dalam direktori <code>\/var\/log<\/code> di sistem operasi berbasis Linux. Ada beberapa jenis file log termasuk, cron, kernel, users, security dan sebagian besar file-file ini dikendalikan oleh layanan Rsyslog.<\/p>\n<p>Rsyslog adalah sistem yang powerful dan aman untuk pemrosesan log. Server Rsyslog menerima log melalui jaringan dari beberapa server fisik atau virtual dan memantau kesehatan berbagai layanan. Dengan Rsyslog server, Anda dapat memonitor log untuk server lain, perangkat jaringan, dan aplikasi jarak jauh dari lokasi terpusat.<\/p>\n<p>Dalam tutorial ini, kita akan belajar cara mengkonfigurasi Rsyslog\u00a0server di server Ubuntu 18.04.<\/p>\n<h2>Prasyarat<\/h2>\n<ul>\n<li>Dua server menjalankan Ubuntu 18.04.<\/li>\n<li>Alamat IP statis 192.168.0.101 dikonfigurasi pada mesin Rsyslog server dan 192.168.0.102 dikonfigurasi pada mesin Rsyslog client.<\/li>\n<li>Masuk sebagai root atau <a href=\"https:\/\/www.linuxid.net\/post\/cara-membuat-user-sudo-di-ubuntu-linux\/\">user dengan hak sudo<\/a>.<\/li>\n<\/ul>\n<h2>Instal Rsyslog<\/h2>\n<p>Secara default, Rsyslog terinstall di server Ubuntu 18.04. Jika tidak diinstal, Anda dapat menginstalnya dengan menjalankan perintah berikut:<\/p>\n<pre>apt-get install rsyslog -y<\/pre>\n<p>Setelah menginstal Rsyslog, Anda dapat memeriksa versi Rsyslog dengan perintah berikut:<\/p>\n<pre>rsyslogd -v<\/pre>\n<p>Anda akan mendapatkan output berikut:<\/p>\n<pre>rsyslogd 8.32.0, compiled with:&#13;\n\tPLATFORM:\t\t\t\tx86_64-pc-linux-gnu&#13;\n\tPLATFORM (lsb_release -d):\t\t&#13;\n\tFEATURE_REGEXP:\t\t\t\tYes&#13;\n\tGSSAPI Kerberos 5 support:\t\tYes&#13;\n\tFEATURE_DEBUG (debug build, slow code):\tNo&#13;\n\t32bit Atomic operations supported:\tYes&#13;\n\t64bit Atomic operations supported:\tYes&#13;\n\tmemory allocator:\t\t\tsystem default&#13;\n\tRuntime Instrumentation (slow code):\tNo&#13;\n\tuuid support:\t\t\t\tYes&#13;\n\tsystemd support:\t\t\tYes&#13;\n\tNumber of Bits in RainerScript integers: 64&#13;\n&#13;\nSee http:\/\/www.rsyslog.com for more information.&#13;\n<\/pre>\n<p>Setelah install Rsyslog, Anda dapat memeriksa versi Rsyslog dengan perintah berikut:<\/p>\n<pre>systemctl status rsyslog<\/pre>\n<p>Anda akan mendapatkan output berikut:<\/p>\n<pre>? rsyslog.service - System Logging Service&#13;\n   Loaded: loaded (\/lib\/systemd\/system\/rsyslog.service; enabled; vendor preset: enabled)&#13;\n   Active: active (running) since Tue 2019-10-22 04:28:55 UTC; 1min 31s ago&#13;\n     Docs: man:rsyslogd(8)&#13;\n<blockquote class=\"wp-embedded-content\" data-secret=\"WaDcEkrWmc\"><a href=\"https:\/\/www.rsyslog.com\/doc\/\">RSyslog Documentation<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" src=\"https:\/\/www.rsyslog.com\/doc\/embed\/#?secret=WaDcEkrWmc\" data-secret=\"WaDcEkrWmc\" width=\"600\" height=\"338\" title=\"\u201cRSyslog Documentation\u201d \u2014 rsyslog\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>&#13;\n Main PID: 724 (rsyslogd)&#13;\n    Tasks: 4 (limit: 1114)&#13;\n   CGroup: \/system.slice\/rsyslog.service&#13;\n??724 \/usr\/sbin\/rsyslogd -n&#13;\n&#13;\nOct 22 04:28:53 ubuntu1804 systemd[1]: Starting System Logging Service...&#13;\nOct 22 04:28:54 ubuntu1804 rsyslogd[724]: imuxsock: Acquired UNIX socket '\/run\/systemd\/journal\/syslog' (fd 3) from systemd.  [v8.32.0]&#13;\nOct 22 04:28:54 ubuntu1804 rsyslogd[724]: rsyslogd's groupid changed to 106&#13;\nOct 22 04:28:54 ubuntu1804 rsyslogd[724]: rsyslogd's userid changed to 102&#13;\nOct 22 04:28:54 ubuntu1804 rsyslogd[724]:  [origin software=\"rsyslogd\" swVersion=\"8.32.0\" x-pid=\"724\" x-info=\"http:\/\/www.rsyslog.com\"] start&#13;\nOct 22 04:28:55 ubuntu1804 systemd[1]: Started System Logging Service.&#13;\n<\/pre>\n<h2>Konfigurasi Rsyslog\u00a0Server<\/h2>\n<p>Rsyslog sekarang diinstal dan dijalankan. Selanjutnya, Anda harus mengkonfigurasinya untuk berjalan dalam mode server. Anda dapat melakukannya dengan mengedit file \/etc\/rsyslog.conf.<\/p>\n<pre>nano \/etc\/rsyslog.conf<\/pre>\n<p>Pertama, Anda perlu mendefinisikan protokol baik UDP atau TCP atau keduanya.<\/p>\n<p>Untuk menggunakan koneksi UDP dan TCP sekaligus, cari dan hapus komentar pada baris di bawah ini:<\/p>\n<pre>$ModLoad imudp&#13;\n$UDPServerRun 514&#13;\n$ModLoad imtcp&#13;\n$InputTCPServerRun 514&#13;\n<\/pre>\n<p>Selanjutnya, tentukan subnet, IP, atau domain tertentu untuk membatasi akses seperti yang ditunjukkan di bawah ini:<\/p>\n<pre>$AllowedSender TCP, 127.0.0.1, 192.168.0.0\/24, *.example.com&#13;\n$AllowedSender UDP, 127.0.0.1, 192.168.0.0\/24, *.example.com&#13;\n<\/pre>\n<p>Selanjutnya, Anda perlu membuat template untuk memberi tahu Rsyslog\u00a0server cara menyimpan pesan syslog yang masuk. Tambahkan baris-baris berikut sebelum bagian ARAH GLOBAL:<\/p>\n<pre>$template remote-incoming-logs,\"\/var\/log\/%HOSTNAME%\/%PROGRAMNAME%.log\" &#13;\n*.* ?remote-incoming-logs&#13;\n&amp; ~&#13;\n<\/pre>\n<p>Simpan dan tutup file setelah Anda selesai. Kemudian, periksa konfigurasi Rsyslog untuk setiap kesalahan sintaks dengan perintah berikut:<\/p>\n<pre>rsyslogd -f \/etc\/rsyslog.conf -N1<\/pre>\n<p>Anda akan melihat output berikut:<\/p>\n<pre>rsyslogd: version 8.32.0, config validation run (level 1), master config \/etc\/rsyslog.conf&#13;\nrsyslogd: End of config validation run. Bye.&#13;\n<\/pre>\n<p>Terakhir, restart layanan Rsyslog dengan perintah berikut:<\/p>\n<pre>systemctl restart rsyslog<\/pre>\n<p>Sekarang, verifikasi bahwa Rsyslog listening pada TCP\/UDP dengan perintah <a href=\"https:\/\/www.linuxid.net\/post\/cara-melihat-port-yang-terpakai-di-linux-terminal\/\">netstat<\/a> dan <a href=\"https:\/\/www.linuxid.net\/post\/memahami-penggunaan-perintah-grep-di-linux-terminal\/\">grep<\/a> berikut:<\/p>\n<pre>netstat -4altunp | grep 514<\/pre>\n<p>Anda akan mendapatkan output berikut:<\/p>\n<pre>tcp        0      0 0.0.0.0:514  0.0.0.0:*    LISTEN      1332\/rsyslogd       &#13;\nudp        0      0 0.0.0.0:514  0.0.0.0:*     1332\/rsyslogd       &#13;\n<\/pre>\n<h2>Konfigurasikan Rsyslog Client<\/h2>\n<p>Rsyslog Server telah diinstal dan dikonfigurasi untuk menerima log dari remote host.\u00a0Sekarang, Anda perlu mengkonfigurasi Rsyslog client untuk mengirim pesan syslog ke remote Rsyslog server.<\/p>\n<p>Masuk ke mesin Client dan buka file konfigurasi Rsyslog seperti yang ditunjukkan di bawah ini:<\/p>\n<pre>nano \/etc\/rsyslog.conf<\/pre>\n<p>Tambahkan baris berikut di akhir file:<\/p>\n<pre>##Enable sending of logs over UDP add the following line:&#13;\n&#13;\n*.* @192.168.0.101:514&#13;\n&#13;\n&#13;\n##Enable sending of logs over TCP add the following line:&#13;\n&#13;\n*.* @@192.168.0.101:514&#13;\n&#13;\n##Set disk queue when rsyslog server will be down:&#13;\n&#13;\n$ActionQueueFileName queue&#13;\n$ActionQueueMaxDiskSpace 1g&#13;\n$ActionQueueSaveOnShutdown on&#13;\n$ActionQueueType LinkedList&#13;\n$ActionResumeRetryCount -1&#13;\n<\/pre>\n<p>Simpan dan tutup file. Kemudian, restart server Rsyslog untuk menerapkan perubahan konfigurasi:<\/p>\n<pre>systemtcl restart rsyslog<\/pre>\n<h2>Lihat Client Log<\/h2>\n<p>Pada titik ini, Rsyslog client dikonfigurasi untuk mengirim log mereka ke Rsyslog server.<\/p>\n<p>Sekarang, masuk ke Rsyslog\u00a0server dan periksa direktori <code>\/var\/log<\/code>. Anda akan melihat entri dengan hostname mesin klien Anda termasuk beberapa file log:<\/p>\n<pre>ls \/var\/log\/rsyslog-client\/<\/pre>\n<p>Output:<\/p>\n<pre>CRON.log  kernel.log  rsyslogd-2039.log  rsyslogd.log  sudo.log  wpa_supplicant.log&#13;\n<\/pre>\n<h2>Kesimpulan<\/h2>\n<p>Pada artikel di atas, kita belajar cara menginstal dan mengkonfigurasi Rsyslog server di server Ubuntu 18.04. Kita juga belajar cara mengkonfigurasi klien Rsyslog untuk mengirim log ke Rsyslog server.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>File log sangat berguna untuk menganalisis dan mengatasi masalah apa pun yang terkait dengan sistem&hellip;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[71,72,191,167,14],"class_list":["post-1145","post","type-post","status-publish","format-standard","hentry","category-ubuntu","tag-file-system","tag-linux-terminal","tag-rsyslog","tag-ubuntu-server","tag-web-server"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04 - Linuxid<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/\" \/>\n<meta property=\"og:locale\" content=\"id_ID\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04 - Linuxid\" \/>\n<meta property=\"og:description\" content=\"File log sangat berguna untuk menganalisis dan mengatasi masalah apa pun yang terkait dengan sistem&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/\" \/>\n<meta property=\"og:site_name\" content=\"Linuxid\" \/>\n<meta property=\"article:published_time\" content=\"2019-12-08T22:27:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-18T08:21:23+00:00\" \/>\n<meta name=\"author\" content=\"xsand\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Ditulis oleh\" \/>\n\t<meta name=\"twitter:data1\" content=\"xsand\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimasi waktu membaca\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 menit\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/\",\"url\":\"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/\",\"name\":\"Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04 - Linuxid\",\"isPartOf\":{\"@id\":\"https:\/\/linuxid.net\/post\/#website\"},\"datePublished\":\"2019-12-08T22:27:38+00:00\",\"dateModified\":\"2025-04-18T08:21:23+00:00\",\"author\":{\"@id\":\"https:\/\/linuxid.net\/post\/#\/schema\/person\/e6642d26041eab9fef2677e204e89d79\"},\"breadcrumb\":{\"@id\":\"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/#breadcrumb\"},\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Beranda\",\"item\":\"https:\/\/linuxid.net\/post\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/linuxid.net\/post\/#website\",\"url\":\"https:\/\/linuxid.net\/post\/\",\"name\":\"Linuxid\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/linuxid.net\/post\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"id\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/linuxid.net\/post\/#\/schema\/person\/e6642d26041eab9fef2677e204e89d79\",\"name\":\"xsand\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\/\/linuxid.net\/post\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cc8513768e15fa0758099a0ba5b898f3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cc8513768e15fa0758099a0ba5b898f3?s=96&d=mm&r=g\",\"caption\":\"xsand\"},\"url\":\"https:\/\/www.linuxid.net\/post\/author\/xsand\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04 - Linuxid","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/","og_locale":"id_ID","og_type":"article","og_title":"Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04 - Linuxid","og_description":"File log sangat berguna untuk menganalisis dan mengatasi masalah apa pun yang terkait dengan sistem&hellip;","og_url":"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/","og_site_name":"Linuxid","article_published_time":"2019-12-08T22:27:38+00:00","article_modified_time":"2025-04-18T08:21:23+00:00","author":"xsand","twitter_card":"summary_large_image","twitter_misc":{"Ditulis oleh":"xsand","Estimasi waktu membaca":"4 menit"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/","url":"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/","name":"Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04 - Linuxid","isPartOf":{"@id":"https:\/\/linuxid.net\/post\/#website"},"datePublished":"2019-12-08T22:27:38+00:00","dateModified":"2025-04-18T08:21:23+00:00","author":{"@id":"https:\/\/linuxid.net\/post\/#\/schema\/person\/e6642d26041eab9fef2677e204e89d79"},"breadcrumb":{"@id":"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/#breadcrumb"},"inLanguage":"id","potentialAction":[{"@type":"ReadAction","target":["https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/linuxid.net\/post\/cara-konfigurasi-rsyslog-server-dan-client-di-ubuntu-18-04\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Beranda","item":"https:\/\/linuxid.net\/post\/"},{"@type":"ListItem","position":2,"name":"Cara Konfigurasi Rsyslog Server dan Client di Ubuntu 18.04"}]},{"@type":"WebSite","@id":"https:\/\/linuxid.net\/post\/#website","url":"https:\/\/linuxid.net\/post\/","name":"Linuxid","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/linuxid.net\/post\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"id"},{"@type":"Person","@id":"https:\/\/linuxid.net\/post\/#\/schema\/person\/e6642d26041eab9fef2677e204e89d79","name":"xsand","image":{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/linuxid.net\/post\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cc8513768e15fa0758099a0ba5b898f3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc8513768e15fa0758099a0ba5b898f3?s=96&d=mm&r=g","caption":"xsand"},"url":"https:\/\/www.linuxid.net\/post\/author\/xsand\/"}]}},"_links":{"self":[{"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/posts\/1145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/comments?post=1145"}],"version-history":[{"count":1,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/posts\/1145\/revisions"}],"predecessor-version":[{"id":2747,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/posts\/1145\/revisions\/2747"}],"wp:attachment":[{"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/media?parent=1145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/categories?post=1145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/tags?post=1145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}