May 16 15:48:00 xverizex systemd[1]: Starting System Logging Service...
May 16 15:48:00 xverizex rsyslogd: rsyslogd's groupid changed to 108
May 16 15:48:00 xverizex rsyslogd: rsyslogd's userid changed to 104
May 16 15:48:00 xverizex rsyslogd-2039: Could not open output pipe '/dev/xconsole':: No such file or directory [v8.16.0 try http://www.rsyslog.com/e/2039 ]
May 16 15:48:00 xverizex rsyslogd-2007: action 'action 10' suspended, next retry is Tue May 16 15:48:30 2017 [v8.16.0 try http://www.rsyslog.com/e/2007 ]
May 16 15:48:00 xverizex systemd[1]: Started System Logging Service.
На отправляющей стороне видно, что отправляются данные журнала. На принимающей стороне видно что данные приходят. Но это в tcpdump и wireshark. А так в журнал не записываются данные.
# First some standard log files. Log by facility.
#
auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none -/var/log/syslog
#cron.* /var/log/cron.log
#daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
#lpr.* -/var/log/lpr.log
#mail.* -/var/log/mail.log
mail.* @192.168.1.2
#user.* -/var/log/user.log
#
# Logging for the mail system. Split it up so that
# it is easy to write scripts to parse these files.
#
#mail.info -/var/log/mail.info
#mail.warn -/var/log/mail.warn
mail.err /var/log/mail.err
#
# Logging for INN news system.
#
news.crit /var/log/news/news.crit
news.err /var/log/news/news.err