1> Transfer the logs to the server,the server will be a Syslog server.
Setting Syslog Server:
vi /etc/sysconfig/syslog
SYSLOGD_OPTIONS=”-r -m 0″
then restart syslogd service.
Setting Client,for examp the cenos Iptables.

1.Edit the follow parameters in /etc/sysconfig/syslog with vi editor.
On syslog server:
SYSLOGD_OPTIONS=”-m 0 -r”
KLOGD_OPTIONS=”-2″
# -m 0 disables ‘MARK’ messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages received with -r
2.Changed to /etc/

syslog is a utility for tracking and logging all manner of system messages from the merely informational to the extremely critical. Each system message sent to the syslog server has two descriptive labels associated with it that makes the message easier to handle.
By default syslog doesn’t expect to receive messages from remote clients. Here’s how [...]