Infoblox Exchange Cybersecurity Roadshow 2020 – Join us!
North America | Europe | Middle East/Africa | Asia-Pacific

DNS DHCP IPAM

Reply
Accepted Solution

Audit log to Syslog

bietto1975
Techie
Posts: 12
2360     0

Hello,

 

Is it possible to redirect audit log "locally" to syslog, or this option is valid only for external syslog servers?

 

Thank you,

 

Fabio C.

Re: Audit log to Syslog

Adviser
Posts: 128
2361     0

Hello Fabio,

 

When you say, ‘redirect audit log "locally" to syslog’ I believe you are trying to copy all audit log messages to syslogs. If yes, you may do it from :

 

Grid -> Grid properties -> ‘Monitoring’ -> ‘Copy Audit Log Message to Syslog’.

 

Please let me know if this was tried already & if this did not meet your expectations. If not, please let me know what seems to be missing.

 

Best regards,

Mohammed Alman.

Re: Audit log to Syslog

bietto1975
Techie
Posts: 12
2361     0

Hello Mohammed,

 

Yes I found this option at the Grid level properties, this means that if I set up it all the audit events related to any appliance will be written to the syslog because it is not possible to overwrite it at the member level.

 

Is it right?

 

This also mean that if I enable an external syslog server, all the audit events (for any member) will be sent to external syslog.

 

Is it right?

 

Thank you for your precious support !!

 

Fabio C.

Re: Audit log to Syslog

Adviser
Posts: 128
2361     0

Hello Fabio,


Yes, you’re right. As you may know, Audit logs would have all administrative activities & would not be member specific. When you enable the ‘Copy Audit Log Message to Syslog’ option, the audit logs would be sent to the syslogs of the Grid master & this in turn gets to your external syslog server depending upon the ‘Severity’ that you choose at Grid -> Grid properties -> Monitoring -> ‘External Syslog Servers’ properties(Per server) -> ‘Severity’.

 

Hope this helps!

 

Best regards,

Mohammed Alman.

Showing results for 
Search instead for 
Do you mean 

Recommended for You