Is it possible to send Identity Manager logs to Syslog? (4382266)

By default, Identity Manager will send logs into the "%AppData%/One Identity/One Identity Manager/" folder.

Is there an option to send this logging to Syslog?

Before getting started: Some versions of Identity Manager (such as Version 10.0) require the networking component for NLOG network output. Please download the NLog.Targets.Network package from NLOG and extract the net46 library NLog.Targets.Network.dll into the installation folder of Identity Manager. 

STEP 1

Browse to the Installation Directory and edit the NLOG.CONFIG (or GLOBALLOG.CONFIG for previous versions of Identity Manager) with a text editor. 

STEP 2

Add a variable to the top of the file:

<variable name="networkLogLevel" value="Trace" />

STEP 3

Add a new Target before the Rules section:

<targets>
<!-- Trying to send to Syslog -->
<target name="networkLog" 
    xsi:type="Network" 
    onOverflow="Split" 
    newLine="false" 
    lineEnding="None" 
    layout="${remoteLayout}" 
    maxMessageSize="65000" 
    encoding="utf-8" 
    connectionCacheSize="5" 
    maxConnections="0" 
    maxQueueSize="0" 
    keepConnection="true" 
    onConnectionOverflow="AllowNewConnnection" 
    address="udp://10.10.10.10:514" 
    />
</targets>

NOTE: Update the "address" to use the IP and Port used by the Syslog server. 

STEP 4

Add a new rule of where to send the logging:

<logger name="*" minlevel="${networkLogLevel}" writeTo="networkLog"/>

SUMMARY

The above will send ALL logging from tools executed by Identity Manager on that system to the Syslog system.

May 18 10:39:30 10.0.0.61 2026-05-18 07:35:06.1175 TRACE VM-ONEIM-931 dotnet Administrator (VI.Database.Agent.DbQueueOverview 3f5e4e8a PID:3536 ) : DBQueue overview read. (0 entries) 

If a custom layout is needed, a new one can be added to the nlog.config using the options available in NLOG Layout Renderers.