Archived community.zenoss.org | full text search
Skip navigation
Currently Being Moderated

How To Forward Syslog Messages To Zenoss

VERSION 1 
Created on: Sep 14, 2009 11:21 AM by Noel Brockett - Last Modified:  Sep 14, 2009 11:21 AM by Noel Brockett

Instructions for configuring Syslog.conf/Syslog-ng.conf

Forwarding Syslog messages from UNIX/Linux Devices

  1. Log on to the target device (as a super user).
  2. Open /etc/syslog.conf file with an editor (e.g VI).
  3. Enter *.debug and press the Tab key. then enter the host name or IP address of the Zenoss server. See example below:
*.debug     @192.168.X.X
  1. Save the file and exit the file editor program.
  2. Restart the Syslog service using the command below:

/etc.init.d/syslog restart


Forwarding Syslog Messages from a Cisco IOS Router

  1. Log on to the target router.
  2. Type the command enable at the prompt.
  3. Once you are prompted for a password, enter the correct password.
  4. Type the command config at the prompt.
  5. Type the command terminal at the configuration prompt.
  6. At the prompt, Set the Syslog forwarding mechanism. See example below:

logging <IP address of the Zenoss server>
  1. Exit out all the prompts to the main router prompt.


Forwarding Syslog Messages from a Cisco CatOS Switch

  1. Log on to the target switch.
  2. Type the command enable at the prompt.
  3. Once you are prompted for a password, enter the correct password.
  4. Set the Syslog forwarding mechanism. See example below:

set logging server <IP address of the Zenoss server>
  1. You can set the types of logging information that you want the switch to provide with the commands below as examples:

set logging level mgmt 7 default
set logging level sys 7 default
set logging level filesys 7 default


Forwarding Syslog Messages using Syslog-ng

Here is an example for FreeBSD and Linux platforms.

  1. Log on to the target device (as a super user)
  2. Open /etc/syslog-ng/syslog-ng.conf file with an editor (e.g VI).
  3. Add source information to file. See example below:

FreeBSD:

source src { unix-dgram("/var/run/log"); internal ();};

Linux: (will gather both system and kernel logs)

source src {
        internal();
        unix-stream("/dev/log" keep-alive(yes) max-connections(100));
        pipe("/proc/kmsg");
        udp();
};
  1. Add destination information (in this case, the Zenoss server). See example below:
destination zenoss {udp("yourzenossserver.com" port(1514));};
  1. Set your log statements to send local logs to your Zenoss server. See example below:

log { source(src); destination(zenoss); };
Comments (0)