Return
-
Title
What log data is sent via Remote Syslog? -
Description
Remote syslog support was added in SMA version 10.0 to provide a simple method for offloading important log data to a customer-hosted syslog server. This article describes the data provided by the feature. -
Resolution
The existing Logs on the Settings -> Logs page do not utilize syslog, so they are not included in totality.
We will continue to add more log data to the remote syslog output in future releases, but the current list includes:
- Backup processes
- Log pruning
- Nightly SMA processes
- Inventory MIA
- Software Compliance processes
- Software Catalog update
- SAML authentication
- Appliance linking
- UI User authentication
- SSH/console login
- Mail logs
- FTP logs
Customers also have the ability to download the entire current set of local logs via the UI option under Settings->Support to "Retrieve appliance activity logs". This will download the complete server log set as a tarball. These server logs are rotated and retained based on the "Log Retention" configuration on the General Settings page (can be configured for 7, 30, or 90 days).