Syslog and Logrotate Quiz

A Syslog server is set up but is not receiving logs from a client. What could be the issue?

• The rsyslog service on the client is stopped.

• The server is using port 22 instead of 514.

• The client has not configured remote logging.

• All of the above.

Which file do you edit to configure rsyslog on a Linux server?

• /etc/rsyslog.d/

• /var/log/rsyslog.log

• /etc/rsyslog.conf

• /etc/logrotate.d/rsyslog

What protocol does Syslog commonly use for sending logs?

• HTTP

• UDP

• FTP

• TCP

You want to configure a Syslog server to accept logs only from a specific IP. Which directive can be used?

• $AllowedClients

• $ModLoad imtcp

• $InputTCPServerRun

• None of the above

How can you generate a test log message on a Linux system?

• echo "log message" > /var/log/syslog

• loggenerate "test message"

• logger "test message"

• touch /var/log/test.log

A user reports that application logs are not reaching the Syslog server. What's the first troubleshooting step?

• Check the disk space on the client machine.

• Restart the client machine.

• Verify the rsyslog configuration on the client.

• Compress older logs.

In the rsyslog.conf file, what does the line *.info @192.168.1.10 do?

• Filters logs with info priority.

• Forwards logs with info priority to 192.168.1.10.

• Stores logs locally.

• Deletes logs with info priority.

How can you verify if the Syslog server is actively listening on port 514?

• Use the command netstat -an | grep 514.

• Check /etc/rsyslog.conf for port settings.

• Use telnet to connect to port 514.

• All of the above.

Which command allows you to monitor Syslog logs in real-time?

• cat /var/log/syslog

• tail -f /var/log/syslog

• logger -f /var/log/syslog

• vi /var/log/syslog

What does the directive $ModLoad imudp in rsyslog.conf do?

• It enables TCP logging.

• It loads the UDP module for logging.

• It stops the rsyslog service.

• It configures a log rotation.