MCP logging to remote server

Question

I've been trying to set the MCP logging which we are required to have at debug level to a remote server. Is this possible? When i set up the remote logging for the virtual servers i had to go into each of them and point to the publisher, i don't see anyway to do that for default type logs (audit, secure, messages etc.)

any help would be greatly appreciated.

Rick.

oly_r · Answer

I've tried the&nbsp;K56602501 instructions but get nothing, i've got to be missing something.&nbsp;&nbsp;&nbsp;&nbsp;modify syslog {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; auth-priv-from notice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; auth-priv-to emerg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cron-from warning&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cron-to emerg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; daemon-from notice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; daemon-to emerg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; description none&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; include none&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; iso-date disabled&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; kern-from notice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; kern-to emerg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mail-from notice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mail-to emerg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; messages-from notice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; messages-to warning&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; remote-servers none&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; user-log-from notice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; user-log-to emerg&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;Replace the&nbsp;include none&nbsp;line with the desired syslog filter. For example, to configure&nbsp;syslog-ng&nbsp;to log warning through emergency log level messages to UDP port 514 on destination hosts 192.168.1.1 and 192.168.1.2, use the following syntax:&nbsp;&nbsp;&nbsp; include "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; filter f_audit{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; match(AUDIT);&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination d_syslog_server {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; udp(\"192.168.1.1\" port (514));&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; udp(\"192.168.1.2\" port (514));&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; log {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; source(s_syslog_pipe);&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; filter(f_audit);&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination(d_syslog_server);&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "

leslie_hubertus · Answer

Hey&nbsp;Oly_r&nbsp;- I see that nobody has replied yet, so I'm featuring your post in this week's Community Highlights article in order to boost visibility for you.&nbsp;

Forum Discussion

MCP logging to remote server

2 Replies

Recent Discussions

Help with URL Masking

Import PKCS 12 SSL to Device Certificate via API/Script or CLI on BIG-IP

F5 iRule to replace host to path

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5 Rseries R2600 Tenant sizing

Related Content

Integrate F5 Distributed Cloud remote logging with ELK

SIEM news! F5 Distributed Cloud’s remote logging adds IBM’s QRadar

How I did it - "Remote logging with F5 BIG-IP Next and OpenTelemetry"

How I did it - "Remote Logging with the F5 XC Global Log Receiver and Elastic"

How I did it - "Remote Logging with the F5 XC Global Log Receiver and Sumo Logic"