Hi
Hope someone can help as i am at a loss with this? We already have an established Syslog server in our network running on a unix platform and we want to be able to forward those syslog messages to Solarwinds Syslog so we can use this for the Real-time detection when we receive Config change messages. We'd rather do this than reconfiguring every one of devices to send direct if possible as we already have 2 syslog servers configured on each device. Didn't really want to add to that load if possible.
We have setup the forwarder to go to 2 locations to test. One is a colleagues laptop and the other is the Solarwinds Server. However the messages only seem to reach my colleagues laptop.
Does the syslog viewer only accept a particular format?
This is what we have set-up
# Message format templates
template t_standard_format { template("$DATE $HOST $PROGRAM $MESSAGE\n"); template_escape(no); };
# Destination for JL Solarwinds - setup by PT 2016-10-16
destination d_solarwinds { udp("172.22.90.225" port(514) template(t_standard_format)); };
We have sent syslog messages direct as a test and these work fine. It just seems to be the forwarded messages that are not working.
Any ideas?