Syslog Collectors¶

You can use a syslog collector to collect data from sources that follow the syslog protocol. Once you add a device, you can use it either as a proxy, or as a device depending on its mode of configuration.

1. Go to Configure >> Built-in Collectors/Fetchers >> Syslog Collectors.

2. Select the LogPoint instances where you want to configure the syslog collector.

3. Click Next.

   

   Configuring the Syslog Collector¶

4. Select a Proxy Condition:

   1. If you select None, select a Processing Policy, a Parser, and a Charset. The device works as a syslog collector.

   2. If you select Use as Proxy, select a Parser, and a Charset. The device itself is used as a proxy.

   3. If you select Uses Proxy, select a Processing Policy, enter a ProxyIP which is the IP address of the device used as its proxy, and enter the Proxy Server Hostnames (case-sensitive). The device uses a proxy device to collect logs.

5. You can either configure the syslog collector to a device or a log collection policy.

   1. If you select Device, select all the devices where you want to configure the collector.

      Note

      For multiple LogPoint instances, you can select the devices common to the selected LogPoints only.

   2. If you select Log Collection Policy, select all the log collection policies where you want to configure the collector.

      Note

      You can only select a log collection policy if you used None as the proxy condition.

6. Click Add to List.

7. Click Next.

   

   Confirming the Changes¶

8. Review your changes. You can go Back to make any changes if necessary.

   Note

   Click Download Report to save the summary of the task in PDF.

9. Click Finish.

10. Click OK.