Veeam One Logs in windows format

[all_zone123]

Hello colleagues!
I'm writing here because I need assistance related to Veeam One logs.
My purpose is for Veeam One logs to be saved in windows format in order for our Security software to be able to read them.
I think the best way to do that is to insert the veeam one logs in the event viewer console.
I already add the label Veeam One in the event viewer, but I don't know how to continue. Which file from Veeam One folders I should use I in order to receive the logs in event viewer? The logs that I need are the logs with the alarm notifications that are generated. They should be visible in event viewer!
Could someone assist me?
Many thanks in advance!

[Vitaliy S.]

Hello Dim,

Veeam ONE does not write any data in the Windows Event Viewer format, so I'm not sure that you will be able to parse VeeamDCS log files and display alarms in the required format. Does your security software accept emails as a notification about alarms?

Thank you!

[all_zone123]

Hello Vitaliy,
Thank you for your answer!
I'm not sure whether the security software accepts emails as notification alarms because it's not under our management.
But what I know is that the security software accepts only logs in windows format, or logs transferred by Syslog server.

Could you please tell me where I can find "VeeamDCS" log files in order to try to transfer the logs in the Event Viewer.
Is that some .dll file that contains all Veeam One logs or something else?
Also, are you aware of the possibility for Veeam One to work with syslog server, which is linux server?

Thank you in advance for your assistance!

[Vitaliy S.]

You can find all the logs over here:

Veeam ONE Monitor service logs (the ones you need)
%ProgramData%\Veeam\Veeam ONE Monitor\Logs\

Veeam ONE Reporter Service logs
%ProgramData%\Veeam\Veeam ONE Reporter\Logs\

Veeam Reporter Web logs
%ProgramData%\Veeam\Veeam ONE Reporter\Logs\

Veeam ONE Settings Utility
%ProgramData%\Veeam\VeeamOneSettings\

Veeam ONE installation logs
C:\ProgramData\Veeam\Setup

Also, are you aware of the possibility for Veeam One to work with syslog server, which is linux server?

Veeam ONE does not provide any ways to send all its logs to a syslog server.

[all_zone123]

Hello Vitaliy,

I checked the folder where the logs are located and I want to ask if there is an option to transfer these logs in the event viewer?

Thank you in advance.

[wishr]

Hi all_zone123,

Unfortunately, there is no official/supported procedure for converting Veeam ONE logs into WEL events.

What you may do, however, is point your SIEM software to the unstructured VONE logs and then manually configure parsing rules to parse the logs in order to convert them into human-readable events, with the help of SIEM automation. Of course, it's would require a bit of manual work, but will help to achieve what you need.

Thanks