I am quite new to this. I would like to (syslog) forward only one log file from my ESXi host to a remote log server, say everything that is written to auth.log but nothing else. At the same time I still want to keep all of the logs on the ESXi host.
Unfortunately, I only found information about how to configure the forwarding of all logs.
Is it possible to achieve this and if yes how would I go about it?