# Rsyslog data from external servers

**URL:** <https://community.graylog.org/t/rsyslog-data-from-external-servers/4639>\
**Category:** Graylog Central (peer support)\
**Created:** [March 19, 2018, 9:39pm UTC](https://community.graylog.org/t/rsyslog-data-from-external-servers/4639 "2018-03-19T21:39:38Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Markus](https://avatars.discourse-cdn.com/v4/letter/m/b782af/32.png) [@Markus](https://community.graylog.org/u/Markus)\
**Post date:** [March 19, 2018, 9:39pm UTC](https://community.graylog.org/t/rsyslog-data-from-external-servers/4639/1 "2018-03-19T21:39:38Z")

</div>

Hi,

I am new to graylog and I hope you can answer my question or guide me in the right direction.

I have graylog installed and working on a vm server (ubuntu 16.04 lts server) and so far I have a few server where the rsyslog data is sent via udp with the following command on the client servers (ubuntu):

```nohighlight
*.* @192.168.1.211:8515;RSYSLOG_SyslogProtocol23Format

```

This works fine.

Yet, how can I send the rsyslog data from our external servers (different location, over internet) that are not on the same local network? If I have servers located on a different location (colocation, hosted servers). For security reasons I can’t send the rsyslog data via udp or tcp unencrypted over the internet. Or, do I need to use “multiple graylog server setup” for this to work? One graylog server at each colocation (hosted).

Or is there a way to send the rsyslog data via ssh (encrypted) over the internet to the main graylog server?

Regards,  
Markus

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [March 20, 2018, 8:04am UTC](https://community.graylog.org/t/rsyslog-data-from-external-servers/4639/2 "2018-03-20T08:04:43Z")

</div>

You can use TLS to encrypt the connection between your remote syslog servers and Graylog (or another syslog server).

Other than that, there are multiple other possibilities, e. g. using an external log shipper such as Filebeat with TLS or spanning a VPN through which your remote syslog servers can send their messages.

---

<div class="post-metadata">

**Author:** ![Markus](https://avatars.discourse-cdn.com/v4/letter/m/b782af/32.png) [@Markus](https://community.graylog.org/u/Markus)\
**Post date:** [March 30, 2018, 9:48pm UTC](https://community.graylog.org/t/rsyslog-data-from-external-servers/4639/3 "2018-03-30T21:48:37Z")

</div>

Hi,

Does anyone have rsyslog TLS setup instructions for Ubuntu 16.04?

Regards,  
Markus

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [April 13, 2018, 9:48pm UTC](https://community.graylog.org/t/rsyslog-data-from-external-servers/4639/4 "2018-04-13T21:48:52Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.