The purpose of this article is to provide the steps required to record and send Access Log entries to a Syslog server.
It is possible to configure the ProxySG so that events that are written to an Access Log are additionally sent to a syslog server. This can be useful as the syslog server will be able to display the log entries in real-time (see also 000009021).
Note that this will only work if the syslog server supports receiving events via TCP (UDP will not work).
- Define an Access Log file configured to your requirements (called ‘MyLog’ here)
- For this Access Log, configure the Upload Client as type “Custom Client” and ‘Save the log file as:’ a 'text file'
- (Optional) To reduce the transmission time for log uploads, in the 'Send partial buffer after' field, enter a value as low as 5.
- Point the Custom Client to your syslog server specifying its appropriate TCP port number.
- For the log’s upload schedule, specify to upload continuously.
- Next, load Visual Policy Manager. In a Web Access Layer, set the Action to 'Modify Access Logging'.
- In the Access Logging object, enable logging to your new access log.
- Make sure that the log is being written by going to Statistics > Access Logging > Select "MyLog" > Start Tail
Imported Document Id