Syslog Server
Explore this Page
- Overview
- Privilege Required for Syslog
- Configuring Syslog Settings
- Changing Syslog Settings
- Removing a Configured Syslog Server
- DataCore Cmdlets Related to Syslog Server
Overview
Syslog server is a monitoring tool that receives log messages sent by the DataCore Server Controller. If the DataCore Server fails, then the controller changes and the newly elected controller continues to send log messages to the Syslog server.
It is difficult to verify if the Syslog server has received all the log messages sent by the DataCore Server Controller and hence, there is a possibility of loss of messages.
Privilege Required for Syslog
The users must have a role that has the DataCore Server group privileges in order to configure or change the Syslog settings.
Configuring Syslog Settings
To configure Syslog settings:
- In the Server Group page > Settings tab, under Syslog Settings, enter the following information:
- In Server Address: Enter the address of the Syslog server.
- In UDP port: Change the default port number, if necessary. The default UDP port number of 514 is standard and should be correct for most cases.
- In Level: Select the Log Levels to filter unwanted messages to be sent to the Syslog server. By default, all messages are sent to the Syslog server.
- In Source Type: Select the Log Sources to filter unwanted messages to be sent to the Syslog server. By default, all messages are sent to the Syslog server.
- RFC Format: Choose the required RFC format either RFC5424 (recommended) or RFC3164 based on your logging setup.
- Click Apply.
- The “Test Syslog” button allows to test if all the servers in a server group are able to communicate with the Syslog server.
- You can also forward syslog messages from SANsymphony to third-party log platforms. Refer to SANsymphony Syslog Message Forwarding to Elastic Search and Splunk for more information.
Changing Syslog Settings
To change the Syslog settings:
- In the Server Group page > Settings tab > Syslog Settings area, select the field to change and re-enter the information.
- Click Apply.
Removing a Configured Syslog Server
Refer to the PowerShell Cmdlet Reset-DcsSyslogSettings for removing the Syslog configuration.
DataCore Cmdlets Related to Syslog Server
Learn More