Appendix A – Application Examples and How to Use Remote Syslog
Multi-Tech RouteFinder RF650VPN User Guide
200
Note: All data will be sent unencrypted! To ensure your logging, you should set up a VPN between your
RouteFinders and your syslog server. To avoid syslog flood attacks, you should limit incoming traffic on
your server's UDP port 514. You should allow only incoming packets from your syslog client(s).
Some logfile examples are provided below.
Syslog Sample 1
# sample syslog-ng.conf file, all syslog messages of karl2 will be written
# to /var/log/karl2
options { sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (no);
keep_hostname (yes);
};
source s_sys { unix-stream ("/dev/log"); internal();
udp (ip(0.0.0.0) port (514)); };
destination karl2 { file("/var/log/karl2"); };
filter filter_karl2 { host("192.168.2.157");};
log { source(s_sys); filter(filter_karl2); destination(karl2); };
