Jump to content

Syslog Documentation


hatface13

Recommended Posts

Do you (or anyone) have documentation anywhere publicly available (or willing to share) on syslog and the messages that are sent?  Trying to build parsers in my SIEM and this would help a lot if I knew all of the messages that I need to create parsers for.  Easy to generate login and remote session/password viewed logs but I'm sure there are others I will need to parse out and I don't see it in the Security Admin Guide.

 

Thanks!

Link to comment
Share on other sites

Hello,

 

Below is the format we are sending syslog messages across, which should be inline with teh RFC for this.

 

strParams = System.[String].Format("<{0}>{1} {2} {3} {4}", priority, AuditDate.ToString(SystemSettings.SyslogDateFormat), IPAddress, " ", "Passwordstate: " & Description & " Client IP Address = " & IPAddress)

Regards

Click Studios

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...