Log Streaming#

VOSS Automate platform CLI commands are available to enable and manage the streaming of a configurable list of log files to a remote syslog server that can then for example generate alarms based on log messages. The VOSS Assurance product can for example be configured to be the remote server that monitors the system.

The following parameters are available:

  • Remote IP

  • Remote port

  • Protocol

  • Files to stream

The log stream command parameters can therefore be used to:

  • set up and remove remote log streaming on a server

  • add and remove files to stream to a server

Note

The log stream commands that make changes will restart the syslog service.

Refer to the command examples for parameter usage and CLI output.

Command Examples

  • log stream remotelog

    platform@VOSS:~$ log stream remotelog
    ip: Unset
    
  • log stream remotelog <IP:port>|off

    platform@VOSS:~$ log stream remotelog 192.168.100.25:514
    You are about to restart syslog. Do you wish to continue? y
    System updated to use 192.168.100.25 as remote syslog server
    You have new mail in /var/mail/platform
    
  • log stream status

    platform@VOSS:~$ log stream status
        stream:
            ip: 192.168.100.25
            port: 514
            protocol: udp
    
  • log stream remotelog status

    platform@VOSS:~$ log stream remotelog status
    ip: 192.168.100.25:514
    
  • log stream enable <filename>[,<filename>…]

    platform@VOSS:~$ log stream enable syslog,auth.log
    You are about to restart syslog. Do you wish to continue? y
    syslog already in list of files to send to remote
    Updating list of files to stream to remote
    You have new mail in /var/mail/platform
    
    platform@VOSS:~$ log stream status
        stream:
            filenames:
                syslog
                auth.log
            ip: 192.168.100.25
            port: 514
            protocol: udp
    
    platform@VOSS:~$ log stream enable dmesg,dpkg.log
    You are about to restart syslog. Do you wish to continue? y
    Updating list of files to stream to remote
    platform@VOSS:~$ log stream status
        stream:
            filenames:
                syslog
                auth.log
                dmesg
                dpkg.log
            ip: 192.168.100.25
            port: 514
            protocol: udp
    

    If a file is already in the list, a message shows: “already in list of files to send to remote”.

Note

If the platform/event.log and platform/audit.log files are to be streamed, ensure that local logging has been enabled for these, using the log event locallog on and log audit locallog on commands. See: Log Type Commands.

  • log stream disable <filename>

    platform@VOSS:~$ log stream disable syslog
    You are about to restart syslog. Do you wish to continue? y
    syslog not currently in list of files to send to remote
    You have mail in /var/mail/platform
    
  • log stream protocol <tcp|udp>: udp is default if not specified.

See also: