We are planning to setup a centralized syslog server in our setup. I got 2 questions with respect to it.
1. In a typical setup, what are all the log messages we should push to centralized log server from each client ? In /etc/syslog.conf file (on selector field), what are the "facility" and "level", we should use?
2. We have the Jboss application running on all client server and it generates some logs. We would like to capture these logs also in centralized syslog server. Is it possible to redirect these application logs (from all clients) to centralized log server using 'syslog' facility?