## Introduction

This document explains how to configure rsyslog to support TLS connections, which is necessary for sending logs to Coralogix syslog endpoints.

## Prerequisites

- Ubuntu 22.04 (or newer)

## Configuration

**STEP 1**. Install the `gtls driver` and `ca-certificates`:

```bash
sudo apt update -y
sudo apt install rsyslog-gnutls ca-certificates
```

**STEP 2**. Modify the rsyslog configuration file:

```text
$DefaultNetstreamDriver gtls $DefaultNetstreamDriverCAFile /etc/ssl/certs/ca-certificates.crt $ActionSendStreamDriverMode 1 $ActionSendStreamDriverAuthMode x509/name $ActionSendStreamDriverPermittedPeer *.coralogix.com $template CoralogixSyslogFormat,"{\"fields\": {\"private_key\":\"xxxx\",\"application_name\":\"vagrant\",\"subsystem_name\":\"syslog\"},\"message\": {\"message\":\"%msg:::json%\"}}\n" *.* @@syslog.[[DOMAIN_VALUE]]:6514;CoralogixSyslogFormat
```

**STEP 3**. Restart rsyslog:

```bash
sudo systemctl restart rsyslog
```

## Troubleshooting

**STEP 1**. Check the status of the rsyslog service:

```bash
sudo systemctl status rsyslog
```

**STEP 2**. Check for any errors in the journalctl logs:

```bash
sudo journalctl -f -u rsyslog
```

## Additional resources

|                     |                                                                                             |
| ------------------- | ------------------------------------------------------------------------------------------- |
| Coralogix Endpoints | [Coralogix Endpoints](https://coralogix.com/docs/integrations/coralogix-endpoints/index.md) |

## Support

**Need help?**

Our world-class customer success team is available 24/7 to walk you through your setup and answer any questions that may come up.

Feel free to reach out to us **via our in-app chat** or by emailing [support@coralogix.com](mailto:support@coralogix.com).