Central Syslog Server

How to Add a Central Syslog Server

1. In the IT-Conductor main menu, navigate to Dashboards > Administrator.

2. In the Administrator dashboard, locate the "Central Syslog Servers" panel. You will be redirected to a page similar to the one below. Click to start adding a Syslog Server.

3. In the "New Syslog Server' wizard screen, fill out all the necessary information. Once completed, click to add the system.

4. A pop-up message will confirm that the Syslog Server has been created successfully. Click OK to complete the process.

5. The newly added server will appear in the "Syslog Servers" panel.

How to Set Up Clients to Report to the Central Syslog Server

You can configure various computing and network nodes to report Syslog messages to the central Syslog server. Here are the instructions for Linux machines, for other types of nodes please refer to the relevant documentation resources.

Linux OS

1. Login with a privileged account (or sudo) and edit the Syslog configuration file /etc/rsyslog.d/remote.conf (SLES) or /etc/rsyslog.conf (RHEL).

2. Uncomment the relevant line (TCP or UDP) and replace remote-host with the address of the Central Syslog Server.

UDP Example:

# Remote Logging using UDP
# remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional
*.* @it-conductor-gateway-host

TCP Example:

# Remote Logging using TCP for reliable delivery
# remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional
*.* @@it-conductor-gateway-host

3. Save the file.

4. Restart the rsyslog service.

> sudo systemctl restart rsyslog.service

5. Verify the Syslog forwarding is functioning:

> logger "hello world"

The log message hello world should now appear in the IT-Conductor Central Syslog Server.