HCO Advanced - Linux Logging

Question

Hello Thwack,

I have a question that so far support has not been able to answer for me.   I am running HCO Advanced with Log viewer.   Not to be confused with Log analyzer,  log viewer simply collects the logs and allows you to view them and create a few alert rules.    Logs are collected by installing the Solar Winds agent on end points and simply enabling Log and Event Monitoring.    This works perfectly with Windows agents but logs never get sent when installing the agent on Linux machines. i have verified that there is communication between the Linux servers and SW server and even was able to generate logs manually but not with the SW agent (see below link).

www.eventsentry.com/.../500-how-do-i-send-syslog-messages-from-centos-redhat-to-eventsentry

Anyone experience this problem?  Is this a normal limitation for Linux machines?

Thanks in advance!

mgarrett269 · Answer

Thanks JP for the response.   That makes sense and seems to be what I'm seeing.   I'm very surprised that this is not included in SW documentation for Log Viewer as a limitation or a best practice setup when collecting logs for Linux machines.

JP_net · Answer

I believe that Windows Events is using the agents because Windows doesn't have an exporter that is native to the operating system to send them as syslog. Linux does have a way to do that. In order to get your log messages into SolarWinds Log Viewer, you will have to configure syslog to export to SolarWinds.