Configuring rsyslog for Linux

Procedure

1. Open /etc/rsyslog.conf and do the following:
   1. Add the following lines to the file:
      # this is for splx debug log

      local3.* /var/log/splx_usr.log
   2. Search for #$ModLoad imklog and delete the character # from the text.
   3. Add the following lines to the file:
      # this is for KHM debug log

      if $msg contains "SPLXMOD" and not($msg contains

      "systemd-journal") then {

      action(type="omfile" file="/var/log/splx_kern.log")

      }
2. Restart the rsyslog daemon by typing service rsyslog restart in the terminal.
3. Set the debug parameter (UserDebugLevel) in the tmsplx.xml file to 5.
4. Set the debug parameter (KernelDebugLevel) in the tmsplx.xml file to 3.
5. Restart ServerProtect by typing service splx restart.
   After you have configured the settings, ServerProtect stores debug information to the splx_usr.log and splx_kern.log file in /var/log/. You can open this file to see the debug logs.