Forum Discussion

Vaibhav_Goel's avatar
Vaibhav_Goel
Icon for Nimbostratus rankNimbostratus
Jun 18, 2018

Issue in changing IP for syslog server

Hello, I have an issue in SYSLOG server configuration. in our setup, IP of syslog server has been changed. we have changed the syslog server IP also. But still it is device is sending data to old configured IP on port 514. can anyone please tell , where i need to check so that it would not send data to old syslog server

 

AFM
application delivery
ASM Advanced WAF
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jun 18, 2018

    Hi,

    First of, to be sure that you don't send data to the old server please using CLI process a tcpump:

    tcpdump -nni 0.0 dest host 1.1.1.1 and port 514

    Where 1.1.1.1 is your old syslog server...

    And you can check using GUI that you modify configuration:

    • System ›› Logs : Configuration : Remote Logging

    and/or

    • System ›› Logs : Configuration : Log Destinations (check where the destination forward logs in your log destinations profile) if you use it of course.

    Keep me in touch