Send Syslog messages to multiple SYSLOG servers

leonnoble · ‎06-15-2010

Hi,

We are have two syslog servers defined, however we notice that the ACS only sends the syslogs to one server and will only send to the other in a failure scenario, which is a standard operation across all platforms. However we have a requirement for the ACS to send syslogs to both servers simultaneously, is there a configuration option for this?

Many Thanks

Leon Noble

gaboughanem · ‎06-23-2010

hi

what version of ACS you are using? ACS 5.0 and 5.1 can support 2 syslog server simultaneously .

regards,

leonnoble · ‎06-24-2010

Thanks,

We are 5.1, but are unable to find the setting that allows this, can you help.

Many Thanks

jrabinow · ‎06-24-2010

You can do the following:

1) Create a remote log target for your syslog server atSystem Administration > Configuration > Log Configuration > Remote Log Targets

2) Configure the log categories that should be enabled to eb sent to this log target.

Go toSystem Administration > Configuration > Log Configuration > Logging Categories > Global

Select a specifc category and then look at "Remote Syslog Target" tab.

For each category that you want sent to your syslog server select the remote log target in the "Selected Targets" transfer box

Note that this configuration is hierarchical. So if make configuration for one log category it applies to all subtemding categories. For example if configure

"AAA Audit" then the configuration will apply to the pass and failed attempts categories

leonnoble · ‎06-25-2010

Thanks,

That has worked perfectly, thanks again for the help.

Waris Hussain · ‎06-28-2010

Hi

I am not sure if there is an option but what is the ACS version you are talking about ?

Thanks

Waris Hussain

leonnoble · ‎06-29-2010

Hi Waris,

Not sure if you have seen the post from jrabinow, but the solution that was provided by jrabinow works for our requirement. It is version 5.1

Kind Regards