Quantcast
Viewing all articles
Browse latest Browse all 1179

Re: Hp ProLiant Syslog Service

Hi, I think this would fit better in the Linux section of the forum.

 

I'm sure there are many posts about this topic on the Internets :)

 

//Edit: A quick checked showed that there are apparently syslog servers also for Windows!

 

What I'd use is a server that runs Linux. Most of the Linux distros have a syslog service available. It is called by many names, depending on which Linux Distro. Sometimes it's called rsyslog, syslogd, or syslog-ng. In RHEL it's rsyslog. To set up it as a service you need to basically:

 

  1. enable log receiption in /etc/rsyslog.conf (so uncomment the UDP/TCP sections)
  2. restart rsyslog
  3. open firewalls

 

You probably want to set up rules so that logs from remote servers/services are not stored in /var/log/messages. Very simplified, you can for example say that if this $IP then put log $HERE.

 

Next step is making these logs useful :)

Lately I've been importing the syslog logs with logstash into an Elasticsearch index and then use kibana to view them in a web interface.


Viewing all articles
Browse latest Browse all 1179

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>