Forum Discussion
afreudenr
Aug 02, 2019Nimbostratus
Some audit logs do not show on remote syslog server
I have set up a syslog HSL filter/destination which sends ALL syslogs including audit logs to a logstash server. The data is showing there, but it seems that no all of the audit log data is sent.
More specifically all pam_ldap and ldap user login information is missing (httpd/sshd login)
Is there a way to configure this in the GUI, or are there changes on the command line needed (or did I misconfigure?)? If yes, any details?
Thanks,
Andreas
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects