Syslog

Purpose

• Forward system log events to one or more external syslog servers.
• Set the transport, port, and minimum severity for each destination.
• Enable or disable a destination without deleting it.
• Review each destination's status and last successful delivery.

Prerequisites

• Available to root accounts only.
• Syslog now lives under Platform (Cluster); the previous settings cog has been removed.
• Minimum permission to view: platform.syslogs.read
• Permission to add a destination: platform.syslogs.create
• Permission to edit a destination: platform.syslogs.update
• Permission to delete a destination: platform.syslogs.delete

View syslog destinations

1. Open Platform → Syslog (root account only).
2. Review the columns: Name, Host, Port, Transport, Min Severity, Status, and Last Success.
3. Expected result: all configured syslog destinations are listed.

Create a syslog destination

1. Open Platform → Syslog (root account only).
2. Choose Create Syslog Destination.
3. Enter a Destination Name.
4. Set Enabled to turn forwarding on or off.
5. Enter the Host (IP address or hostname) and Port (1-65535).
6. Choose the Transport (TCP or UDP).
7. Choose the Minimum Severity (Debug, Info, Warn, or Error) to forward.
8. Choose Save.
9. Expected result: the new destination appears in the list.

Edit or delete a destination

1. Open Platform → Syslog (root account only).
2. Select a single destination and choose Edit to change its configuration.
3. Or select one or more destinations, choose Delete, and confirm.
4. Expected result: changes are saved, or the selected destinations are removed.

Best Practices

• Only events at or above a destination's minimum severity are forwarded — set it no lower than you need.
• Use a valid IP address or hostname for the Host; invalid values are rejected.
• Disable a destination instead of deleting it when pausing forwarding temporarily.