|
|||||||||||||
|
3.1.3 UsageSeptember 13th, 2025 AC Configure Syslog is a simple command line tool 3.1.3.1 Basic Syntax# ac_configure_syslog # ac_configure_syslog datastore <absolute_path> # ac_configure_syslog level <level> <type> [<hostname/IP>|server] # ac_configure_syslog --version 3.1.3.2 Getting the current configuration# ac_configure_syslog The above will provide output similar to the following: DATASTORE=/bear/syslog LOG_LEVEL=medium TYPE=local REMOTE_HOST= SERVER=false In this example, it tells us that logs are sent to /bear/syslog'; that the logging level is set to medium; that logging is all done locally; that this host is not a Syslog server and will not accept remote log entries. 3.1.3.3 Moving the datastoreIt is unlikely that the location of the logging datastore needs to be moved. In most cases this is not recommended. However, if required, the log directory can be moved to any location desired on the system with the following syntax: # ac_configure_syslog datastore <absolute_path> Existing logs in the current datastore path will be moved to the new location. example # ac_configure_syslog datastore /var/log/new_log_dir 3.1.3.4 Configuring Syslog# ac_configure_syslog level <level> <type> [<hostname/IP>|server] level
type
hostname/IP
server
3.1.3.5 ExamplesLocal logging with retention of one year# ac_configure_syslog high local Remote logging# ac_configure_syslog low remote 192.168.1.40 Remote logging supports any valid remote host address. However, IP addresses are recommended as they do not incur hostname lookups in DNS and are therefore lower latency and utilise fewer resources. Setting up a Syslog server with a three month event window# ac_configure_syslog medium local server
|
||||||||||||