I have set up a remote syslog server on rhel5. It is working great, but here is the one thing that bothers me.
it seems rsyslog created a directory for the local machine in /var/log/rsyslog and it writing the local machines logs there while /var/log/messages gets all the logs from every client.
Is there a way to keep the local logs in /var/log/messages and NOT all the clients?
BTW, all the cisco clients get their own directory in /var/log/rsyslog as well.
Hope I explained this right, I am rushing.