Skip to main content
abdulrahman
abdulrahman
New Member
September 28, 2022
Question

nginx logs

  • September 28, 2022
  • 1 reply
  • 1722 views

Hello dears

I have many web servers running on Centos 7, I have nginx logs located in var/log/nginx , (access.log, error.log , etc,.), I want these logs to be sent to Fortisiem, how I can achieve this?

1 reply

AEK
SuperUser
AEK
SuperUser
September 28, 2022

Hi Abdul

On CentOS 7 you use rsyslog, which is supported by FortiSIEM.

Just edit your /etc/rsyslog.conf to redirect nginx logs to FSM IP, then restart your syslog service.

AEK
    abdulrahman
    abdulrahmanAuthor
    New Member
    September 29, 2022

    Hello AEK

    Thank you for your reply, I already configured the rsyslog.conf as *.* @ (Fortisiem IP) 514

    , I think * means all logs, is there any further configuration to do?

    AEK
    SuperUser
    AEK
    SuperUser
    September 29, 2022

    Hi Abdul

    That's right, *.*  @x.x.x.x means all facilities and all priorities are sent to x.x.x.x.

    No need to add ":514" since it is the default syslog port.

    Nothing to do from OS side except to restart rsyslog service.

    AEK
    Terms & ConditionsAccessibility statement