Send syslog traffic to another server

You can add a file in /etc/rsyslog.d/ with the following to send the syslog traffic to another Ip.

vi /etc/rsyslog.d/40-custonlog.conf


*.*  action(type="omfwd" target="10.1.2.6" port="514" protocol="tcp"
            action.resumeRetryCount="100"
            queue.type="linkedList" queue.size="10000")