ADS Syslog messages via TCP protocol.
Information
Summary: |
The sending of ADS Syslog messages via TCP protocol. |
Environment: |
Product: Floamon ADS Version: Any Platform: Any |
Question/Problem Description: |
Is it possible to send the syslog messages from the ADS plugin via TCP protocol? |
Steps to Reproduce: | |
Error Message: | |
Defect Number: | |
Enhancement Number: | |
Cause: | The settings of the Syslog messages in ADS are only via the Syslog UDP sender. |
Resolution: | When configuring Syslog messages in the ADS, it is possible to choose "Flowmon OS settings" instead of "Syslog UDP sender" |
Workaround: |
In this case, the servers defined in Configuration Center > System > System Settings > Syslog event logging will be used. The servers in the Configuration Center are defined using IP address, port, and protocol (UDP/TCP). ADS syslog messages are sent as a "local6" syslog facility. This facility is represented by the "SSH logs" category in Configuration Center - System - Syslog Event Logging - Configure Syslog message. So, enabling the "SSH logs" category is necessary. Without it, no ADS events are sent. |
Notes: | When "SSH logs" are enabled, you might also see other messages (logs from /var/log/secure related to the SSH). It is currently impossible to avoid them, so they must be filtered out on the syslog server. |