Log Streaming#

VOSS Automate platform CLI commands are available to enable and manage the streaming of a configurable list of log files to a remote syslog server that can then for example generate alarms based on log messages. The VOSS Assurance product can for example be configured to be the remote server that monitors the system.

The following parameters are available:

  • Remote IP

  • Remote port

  • Protocol

  • Files to stream

The log stream command parameters can therefore be used to:

  • set up and remove remote log streaming on a server

  • add and remove files to stream to a server

Note

The log stream commands that make changes will restart the syslog service.

Refer to the command examples for parameter usage and CLI output.

Command Examples

  • log stream remotelog

    platform@VOSS:~$ log stream remotelog
ip: Unset

  • log stream remotelog <IP:port>|off

    platform@VOSS:~$ log stream remotelog 192.168.100.25:514
You are about to restart syslog. Do you wish to continue? y
System updated to use 192.168.100.25 as remote syslog server
You have new mail in /var/mail/platform

  • log stream status

    platform@VOSS:~$ log stream status
    stream:
        ip: 192.168.100.25
        port: 514
        protocol: udp

  • log stream remotelog status

    platform@VOSS:~$ log stream remotelog status
ip: 192.168.100.25:514

  • log stream enable <filename>[,<filename>…]

    platform@VOSS:~$ log stream enable syslog,auth.log
You are about to restart syslog. Do you wish to continue? y
syslog already in list of files to send to remote
Updating list of files to stream to remote
You have new mail in /var/mail/platform

platform@VOSS:~$ log stream status
    stream:
        filenames:
            syslog
            auth.log
        ip: 192.168.100.25
        port: 514
        protocol: udp

platform@VOSS:~$ log stream enable dmesg,dpkg.log
You are about to restart syslog. Do you wish to continue? y
Updating list of files to stream to remote
platform@VOSS:~$ log stream status
    stream:
        filenames:
            syslog
            auth.log
            dmesg
            dpkg.log
        ip: 192.168.100.25
        port: 514
        protocol: udp

    If a file is already in the list, a message shows: “already in list of files to send to remote”.

Note

If the platform/event.log and platform/audit.log files are to be streamed, ensure that local logging has been enabled for these, using the log event locallog on and log audit locallog on commands. See: Log Type Commands.

  • log stream disable <filename>

    platform@VOSS:~$ log stream disable syslog
You are about to restart syslog. Do you wish to continue? y
syslog not currently in list of files to send to remote
You have mail in /var/mail/platform

  • log stream protocol <tcp|udp>: udp is default if not specified.

See also: