Skip to main content
thelinuxlich
thelinuxlich
New Member
October 11, 2019
Question

How can I send a log message through a custom program?

  • October 11, 2019
  • 1 reply
  • 2807 views

I'm trying to send a log message using Node.js by sending it through UDP(514), TCP(1470) and even a syslog library but nothing shows up on the SIEM dashboard. What am I doing wrong?

    1 reply

    FSM_FTNT
    Staff
    FSM_FTNT
    Staff
    November 22, 2019

    If you haven't got a parser defined then it probably won't appear on any dashboards.

     

    You can do a raw log/keyword search from analytics. Search for a keyword you know for sure is in the logs.

     

    Also validate that the syslog is being received at the network interface. As root user on the shell:\

     

    tcpdump -i eth0 dst port 514 and host <192.168.77.99>

     

    change the IP to that of the server sending the logs.

    Terms & ConditionsAccessibility statement