Chapter 4: System Logging
Configuring a Remote Syslog Server
Use the following procedure to configure remote system logging. Most Linux distributions include rsyslog as
the standard syslog daemon. Refer to your Linux documentation for instructions that describe how to configure
rsyslog on Linux.
NOTE
The remote server must have the appropriate port open to receive the logs (UDP port
514 by default). Refer to your operating system and firewall documentation for more
information. If you need to use a different port or TCP protocol, specify it when you add the
remote server's IP or hostname.
To send logs to a remote syslog server:
1.
Add the remote server's IP or hostname to the remote logging configuration (see
).
lunash:>
syslog remotehost add -host
<hostname/IP> [
-protocol
<protocol>] [
-port
<port>]
lunash:>syslog remotehost add -host 192.10.10.101
Stopping syslog:
[ OK
]
Starting syslog:
[ OK
]
192.10.10.101 added successfully
Make sure the rsyslog service on 192.10.10.101 is properly configured to receive the logs
Command Result : 0 (Success)
By default, the remote server will now receive lunalogs, messages, secure, and boot logs at the
info
level
and above, and cron logs at the
notice
level and above. See
"Customizing Remote Logging Severity
to specify which logs to send to which remote server.
2.
On the receiving or target system, start the syslog daemon or service to allow it to receive logs from your
SafeNet Luna Network HSM appliance(s).
3.
Optionally, confirm the remote logging settings (see
).
lunash:>
syslog show
Remote Configured Log Levels:
-----------------------------
lunalogs:
192.10.10.100
info
192.10.10.101
info
messages:
192.10.10.100
info
192.10.10.101
info
cron:
192.10.10.100
notice
192.10.10.101
notice
secure:
192.10.10.100
info
192.10.10.101
info
boot:
192.10.10.100
info
192.10.10.101
info
SafeNet Luna Network HSM 7.3 Appliance Administration Guide
007-013576-005 Rev. A 13 December 2019 Copyright 2001-2019 Thales
52
