| Table of Contents | ||||
|---|---|---|---|---|
|
Overview
...
We will do the configuration on CLI for the Syslog forwarding to the CCE. We can see the logs in /var/log/messages just fine.
Steps to Configure
...
| Code Block |
|---|
We would configure /etc/rsyslog.d/vyatta-log.conf as *.* @remotesysloghost and all work just fine. host IP Address of CCE Server { facility all { level info } facility kern { level debug } facility protocols { level debug } } |
Below is the prefered link -
Sending firewall logs to remote syslog Syslog | Ubiquiti Community
Verification of configuration
...
logs and flows collection status.
Under -
Source The source device IP address section of the device configured will reflect.
...
Verification Through the CCE server
sudo “sudo tcpdump -i any host 9995 514 and host <IP address> -AAA”
The above command should be ran run on the CCE server to check wheather whether or not we are getting logs.
...