Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Syslog-ng interface

Created: 30 Aug 2007 • Updated: 21 May 2010 | 1 comment
We are collecting logs from multiple servers using syslog-ng. Can SSIM process these logs directly, or is some type of agent required to process the syslog records?
 
Also, is it possible to send events directly to SSIM? If so can you point me to documentation on message format and communications interface?
 
Thanks in advance.

Comments 1 CommentJump to latest comment

BS's picture


Code:
We are collecting logs from multiple servers using syslog-ng. Can SSIM process these logs directly, or is some type of agent required to process the syslog records—


 You can process directly syslog files using collector based on syslog file collector class. Than in collector configuration menu point to yours syslog file.
The examples of syslog file collectors are Unix OS collector, suse linux collector, solaris os collector, linux os collector.


Code:
Also, is it possible to send events directly to SSIM— If so can you point me to documentation on message format and communications interface–


 Yes it is possible using generic syslog collector, check the documentation pdf in generic syslog collector file, there are a lot of things explained

BS.