Jump to content

Syslog Documentation


hatface13
 Share

Recommended Posts

Do you (or anyone) have documentation anywhere publicly available (or willing to share) on syslog and the messages that are sent?  Trying to build parsers in my SIEM and this would help a lot if I knew all of the messages that I need to create parsers for.  Easy to generate login and remote session/password viewed logs but I'm sure there are others I will need to parse out and I don't see it in the Security Admin Guide.

 

Thanks!

Link to comment
Share on other sites

Hello,

 

Below is the format we are sending syslog messages across, which should be inline with teh RFC for this.

 

strParams = System.[String].Format("<{0}>{1} {2} {3} {4}", priority, AuditDate.ToString(SystemSettings.SyslogDateFormat), IPAddress, " ", "Passwordstate: " & Description & " Client IP Address = " & IPAddress)

Regards

Click Studios

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...