Skill

implementing-syslog-centralization-with-rsyslog

From asi

Generates rsyslog server and client configs for centralized syslog collection with TLS encryption, GnuTLS drivers, x509 cert auth, per-host segregation, log rotation, and reliable queues. Deploys via Python script.

Python

npx claudepluginhub plurigrid/asi --plugin asi

Tool Access

This skill uses the workspace's default tool permissions.

Preview

- When deploying or configuring implementing syslog centralization with rsyslog capabilities in your environment

SKILL.md

Similar Skills

implementing-syslog-centralization-with-rsyslog

5.9k

Generates rsyslog configs for TLS-secured centralized log collection with GnuTLS drivers, x509 auth, per-host segregation, JSON templates, rotation, and disk queues. Deploys via Python/SSH.

3 files

cybersecurity-skills

implementing-syslog-centralization-with-rsyslog

Generates rsyslog server and client configs for TLS-secured centralized syslog collection with GnuTLS/x509, per-host log isolation, custom templates, log rotation, and reliable disk queues for HA infrastructure.

3 files

cybersecurity-skills-zh

implementing-log-forwarding-with-fluentd

Generates Fluentd and Fluent Bit configurations for centralized log aggregation, routing, filtering, and enrichment to Elasticsearch, S3, Splunk.

asi

Stats

Parent Repo Stars16

Parent Repo Forks5

Last CommitApr 4, 2026

Actions

View Source View Plugin View on GitHub View README

Help us improve

Share bugs, ideas, or general feedback.

Implementing Syslog Centralization with Rsyslog

When to Use

When deploying or configuring implementing syslog centralization with rsyslog capabilities in your environment

When establishing security controls aligned to compliance requirements

When building or improving security architecture for this domain

When conducting security assessments that require this implementation

Prerequisites

Familiarity with security operations concepts and tools

Access to a test or lab environment for safe execution

Python 3.8+ with required dependencies installed

Appropriate authorization for any testing activities

Instructions

Install dependencies: pip install jinja2 paramiko

Generate TLS certificates for rsyslog server and clients using OpenSSL.

Run the agent to generate rsyslog server and client configurations:

Server: TLS listener on port 6514, per-host directory output, JSON-format templates
Client: TLS forwarding with disk-assisted queues for reliability

Deploy configurations to servers via SSH (paramiko).

Validate TLS connectivity and log delivery.

python scripts/agent.py --server-ip 10.0.0.1 --clients 10.0.0.10,10.0.0.11 --ca-cert ca.pem --output syslog_report.json

Examples

Server Configuration (TLS)

module(load="imtcp" StreamDriver.Name="gtls" StreamDriver.Mode="1" StreamDriver.Authmode="x509/name") input(type="imtcp" port="6514") template(name="PerHostLog" type="string" string="/var/log/remote/%HOSTNAME%/%PROGRAMNAME%.log") *.* ?PerHostLog

Client Configuration (Reliable Forwarding)

action(type="omfwd" target="10.0.0.1" port="6514" protocol="tcp" StreamDriver="gtls" StreamDriverMode="1" StreamDriverAuthMode="x509/name" queue.type="LinkedList" queue.filename="fwdRule1" queue.maxdiskspace="1g" queue.saveonshutdown="on" action.resumeRetryCount="-1")