Here you can configure local and remote logging for the device.
When using remote logging, please note that the log files are not encrypted.
Local logging
☑
The log messages are stored locally in /var/log
. The format is human readable. Log rotation is applied.
☐
The log messages are not stored locally.
Persistent log partition: This parameter is effective only when Local logging is activated.
☑
The log messages are stored in a persistent partition on the device. This partition is encrypted.
☐
The log messages are stored in temporary files that are deleted on reboot.
Partition size in MB: Size of the persistent log partition
Remote mode
Possible options:
- "Server": The device receives log messages from a remote client.
- "Client": The device sends its log messages to a remote server.
- "Off": The device does not send or receive any log messages.
Remote Mode Switched to "Server"
You can configure the device to act as a syslog server. One or more other clients can send log files to this server; you can create a separate server configuration for each client.
Template for log file storage: Pattern from which the file path for storing the received log messages is created. %HOSTNAME%
is the name of the sender which is configured under Name.
Server: A syslog server can be added by clicking
.
Local port: Port on which the local server listens for log messages
Transport protocol: Protocol to be used for the transmission of log messages
Name: Hostname of the sender (optional). This is useful for filtering the log messages based on the clients that have sent them.
Local address: Optional parameter; on multihomed machines (i. e. machines with multiple addresses), this specifies to which local address rsyslog is bound. If no address is specified it defaults to 0.0.0.0
, so that rsyslog listens on every network interface. For more information, see the official documentation at https://www.rsyslog.com/doc/v8-stable/configuration/modules/imtcp.html.
Remote Mode Switched to "Client"
You can configure one or more clients, e.g. one server for kernel messages and another server for authentication messages.
Clients: A client can be added by clicking
.
Remote address: IP address or hostname of the remote server
Remote port: Port on which the server listens for log messages
Transport protocol: Protocol to be used for the transmission of log messages
Syslog facility: Type of program for which log messages are created
Syslog level: Severity level of the event
Syslog style template: Format in which the messages are sent