Comprehensive data protection for all workloads
Post Reply
denlun44
Influencer
Posts: 12
Liked: 4 times
Joined: Oct 17, 2023 8:31 am
Full Name: Dennis Lundkvist
Contact:

Multiple Syslog servers?

Post by denlun44 »

I am happy that Veeam can now forward logs to Syslog but I am a bit confused that the tab for Event Forwarding shows a listbox that is titled "Syslog servers" (note plural) but when you try to add more than one server you get the message "Unable to add more than one syslog server."...
Is this a hint that we will be able to add more than one sometime soon? It would be good if it could since I need to forward events to 2 syslog servers.
And while we are going on about syslog it would also be nice to have a checkbox to forward even the audit log file's contents to syslog.

/dennis
Mildur
Product Manager
Posts: 10637
Liked: 2866 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Multiple Syslog servers?

Post by Mildur »

Hello Dennis

We have multiple syslog servers on our roadmap. But no ETA we can share today.
But thank you for your request, we will note it as +1.

Best,
Fabian
Product Management Analyst @ Veeam Software
JaySt
Service Provider
Posts: 478
Liked: 92 times
Joined: Jun 09, 2015 7:08 pm
Full Name: JaySt
Contact:

Re: Multiple Syslog servers?

Post by JaySt »

wow. just ran into this today and was not expecting this. RTFM failed. Would have saved me alot of time if i read that sentence in the docs :)
would be very much appreciated to be able to configure multiple targets.
+1
Veeam Certified Engineer
Mildur
Product Manager
Posts: 10637
Liked: 2866 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Multiple Syslog servers?

Post by Mildur » 1 person likes this post

Request noted.

My colleagues mentioned internally that you’re currently using Syslog forwarding as a workaround if you have multiple sysloggers. Here are two quotes:
most syslog receivers can also forward whatever they receive to another syslog server.
If you use another syslog server as a forwarder please ensure that the message is forwarded 1:1 and not modified. We already had cases where our security apps and parser did not work as the syslog was relayed and the relay changed the message (not the content but e.g. timestamps and source etc).
Best,
Fabian
Product Management Analyst @ Veeam Software
Post Reply

Who is online

Users browsing this forum: Bing [Bot] and 11 guests