Skip to main content
dirome
dirome
Visitor III
April 11, 2018
Question

Syslog

  • April 11, 2018
  • 1 reply
  • 6299 views

Hello,

 

For syslog configuration in FAZ, why is necessary configure system syslog and system aggregation-client?

What is their relation?

 

 

    1 reply

    chall_FTNT
    Staff
    chall_FTNT
    Staff
    April 11, 2018

    configure system syslog ... for sending local event logs

    system aggregation-client (5.4 or earlier) ... for forwarding logs from another device

    dirome
    diromeAuthor
    Visitor III
    April 11, 2018

    Hi Chall,

     

    When I configured just system syslog I couldn't see traffic through sniffer, just i saw traffic when i configured system aggregation-client, why did happened it?

     

    tsimeonov_FTNT
    Staff
    tsimeonov_FTNT
    Staff
    April 11, 2018

    aggregation-client is intended to forward logs received by other logging devices such FGT. system syslog is like send local FAZ event logs to a systlog device.  In your case like FAZ event log may not happen so   often as other logs from other  devices.

    Also it maybe need additional tuning on severity and etc from cli: config sys locallog syslogd filter config sys locallog syslogd settings

    Terms & ConditionsAccessibility statement