This knowledge shows how to configure BSD-syslog (RFC 3164) and IETF-syslog (RFC 5424) message formats in Syslog-ng Premium Edition (PE) through some basic example configurations.
The network() source driver can receive syslog messages conforming to RFC3164 from the network using the TCP, TLS, and UDP networking protocols.
source s_network {
network();
};
source s_network {
network( ip("192.168.1.1") transport("udp") );
};
For more details about network() source driver see the following documentation.
Syslog-ng PE 6: Collecting messages using the RFC3164 protocol (network() driver)
Syslog-ng PE 7: network: Collecting messages using the RFC3164 protocol (network() driver)
The network() destination driver can send syslog messages conforming to RFC3164 to a remote server using the TCP, TLS, and UDP networking protocols. It has a single required parameter that specifies the destination host address where messages should be sent.
destination d_tcp {
network("10.1.2.3");
};
destination d_udp {
network("10.1.2.3" port(1999) transport(udp) );
};
- Navigate to the destination server and open Properties
- Add IP the address of the syslog server
- Set port 514 as Server port
- Select 'Legacy BSD Syslog Protocol' at Messages tab | Protocol
The syslog() driver can receive messages from the network using the standard IETF-syslog protocol (as described in RFC5424-26). UDP, TCP, and TLS-encrypted TCP can all be used to transport the messages.
source s_syslog {
syslog();
};
source s_syslog {
syslog( ip(192.168.1.1) port(1999) transport("tcp") );
};
For more details about syslog() source driver see the following documentation.
The syslog() driver sends messages to a remote host using the IETF syslog format. It has a single required parameter that specifies the destination host address where messages should be sent.
destination d_tcp {
syslog("10.1.2.3");
};
destination d_tcp {
syslog("10.1.2.3" port(1999) );
};
- Navigate to the destination server and open Properties
- Add the IP address of the syslog server
- Set port 601 as Server port
- Select 'Syslog Protocol' at Messages tab | Protocol
BSD-syslog
source s_network {
network( ip("192.168.1.1") flags(no-parse) );
};
IETF-syslog
source s_network {
syslog( ip("192.168.1.1") flags(no-parse) );
};
© ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책 Cookie Preference Center