• Support
• One Identity University
• syslog-ng Premium Edition
• syslog-ng Premium Edition Implementation

syslog-ng Premium Edition Implementation

• Description

  Attend this three-day syslog-ng Premium Edition (PE) Implementation training course to build the knowledge and skills needed to successfully install, configure, operate and troubleshoot One Identity syslog-ng PE. Plus, as part of the course, you can safely hone your syslog-ng PE skills in simulated environments to your increase your hands-on experience before taking on a live implementation.

  Please note that this training is part of the syslog-ng Log Management Foundation Training course. For technology professionals looking to build your knowledge for both syslog-ng Premium Edition (PE) and syslog-ng Store Box (SSB), you can take the syslog-ng Log Manage Foundation Training course to learn about both in a single 4-day training.

  For One Identity partners, you must be certified (pass exams) to deploy solutions.

• Audience

  • Partners seeking to deploy syslog-ng Premium Edition • Architects and consultants who will plan, install and configure syslog-ng Premium Edition

• Objectives

  • Overview of the feature-set of syslog-ng Premium Edition
  • Introduction to syslog protocols (RFC3164, RFC5424 and Eventlog)
  • Installation and basic settings of syslog-ng PE
  • Using Macros and Templates to reformat syslog messages
  • Setup filters
  • Manage syslog-ng daemon from the command line
  • Transferring messages via the network and securing them
  • Collect messages from windows machines
  • Storing messages in logstores and encrypt them.
  • Parsing messages by message parser modules and reformat them by rewrite modules
  • Store messages in SQL databases
  • Classify messages with the radix tree algorithm based patterndb
  • Advanced setting and syslog-ng internals
  • Troubleshooting syslog-ng PE

• Topics

  Introduction syslog-ng PE

  • Features
  • History of syslog-ng PE
  • Protocol Overview

  Simple Settings

  • Install syslog-ng PE
  • Configuration and Licensing
  • Sources and source drivers
  • Destinations and destination drivers
  • The logpath
  • Global options

  Macros and Templates

  • What is message parsing
  • What are macros
  • What are templates and how to use them

  Filters

  • Define filters
  • Filter modules
  • Usage in the logpath
  • Flags of the logpath

  Command Line Tools

  • Command line tools to manage syslog-ng

  Networking

  • Transfer messages via the network
  • Securing the transport
  • Increase reliability

  Windows Messaging

  • Using syslog-ng Agent for windows for message forwarding
  • Collecting event logs by Windows WEC

  Logstore

  • Configuring and displaying logstore files
  • Encrypt and decrypt logstores

  Message Parsing

  • Separate message parts by parser modules

  Database support

  • Sending messages to SQL databases

  Message Content Manipulation

  • Rewriting messages and message parts

  Message Classification

  • Separate and classify messages by patterndb

  Advanced Settings

  • Syslog-ng Internals
  • Message flow and limits
  • Disk buffering
  • Monitoring syslog-ng
  • Configuration tips and tricks

  Troubleshooting syslog-ng PE

  • Troubleshooting syslog-ng settings
  • Troubleshooting syslog-ng Agent for Windows

• Format

  This course is only offered as private instructor-led training delivered at a customer-chosen site for up to 8 attendees.
  

• Special Notes

  Agenda, labs and demos show all available parts for an existing training module. Depending on the course, smaller parts of it might not be taught or performed. Typically, suitable labs must be taught but demos could be selected during a training.