[Feature Request] Shipping to Syslog Server

[Ollo]

Hello,

in bigger datacenters, a central Syslog server is used to store relevant events.
Often Splunk or ELK is used.
It should be possible to ship the veeam logs to a syslog server.
The events in windows application log are not sufficient enough for legal requirements like EU-DSGVO.

Minimum events are:
- Login to BR Server
- Starting Backup
- Starting Restore
- Login errors
- Changing jobs
- Changing settings
- other manipulations

I don't know, which of these requirements VeeamOne can handle, but not every shop has VeeamOne

[Dima P.]

Hello Ollo.

Sorry for the delay. I've noted a feature requests based on your forum post. Thank you!

[Oerten]

Hi,

I'm supporting this feature request aswell.
Would be very nice to being able to send logs to syslog.

Looking forward to hopefully getting this in the next release.

[veremin]

Unfortunately, this feature won't be included in the next product release. Thanks!

[Regnor]

+1 for syslog capabilities in VBR or VEM

[MorNor]

+1

[Gostev]

I just wanted to note that Veeam backup server logs all of its events to the Windows Event Log. And something tells me there are probably dozens of tools out there for sending Windows events to a Syslog server?

[ToddMenefee]

Something tells me there are other backup products that have this capability built-in to the product. Please add this feature.

[tga_infra@tga.gov.sa]

+1

[bct44]

I will add +1 even you could do it by adding tools.

[wolff.mateus]

Just passing to say that this feature would be very interesting.
Some customers have already this necessity.

[Egor Yakovlev]

With the release of VBR 12.1, a native syslog integration has been added to the product.
/Cheers!

[bct44]

It could be amazing to have an integration (templates etc) with some products like Elastic (integration/detection rules) or Splunk (addons).
I asked enhancement request to Elastic, my Elastic SA told only one customer asked. It's surprising.

[rennerstefan]

The first of those kind of integrations was already announced with Sophos MDR and we are researching other options as well.
Feel free to add the SIEM/XDR tools you would love to see integration in this thread.