How can I collect syslog messages as RHQ Events?
The Linux platform plugin can monitor syslog messages by emitting them as events. Syslog messages can be collected by the plugin by either reading syslog message files or by receiving them over a socket listener. In either case, syslog must be configured to format the messages in a way that RHQ can parse. You can either tell RHQ (in the platform’s plugin configuration – aka connection properties) what regular expressions can parse your syslog messages, or in your syslog config file (e.g. /etc/rsyslog.conf), you should format your messages that RHQ understands out of the box.