Syslog Export

Question

We have our phone system syslogging to Orion and I am trying to export these logs from the server and I am not seeing the utility that used to be built into Solarwinds.  We are on the latest version of all applications.

Can anyone provide assistance with exporting these logs so I can get them over to support.

stuartd · Answer

We don't use the internal to SolarWInds syslog facility but use standalone Kiwi which is slowly being replaced by an Open Source product that can cope with the amount of date per second we are generating.

That said, from within the SDK I can see there is an "Orion.Syslog" table that sits underneath the "Orion.LogEntity" table and may have the data you are looking for. If it does, you could then setup a report to extract what you need.

mcam · Answer

This doesn't directly answer your question but gives an alternative.

A little while ago we installed Kiwi Syslog server so we could centralize our syslog data and send it on to wherever it was needed.
Now our syslog data comes into one place and it then forwarded to places like Orion and splunk/logrhythm plus whatever additional vendor specific logging tools we need to use. Each time there is a new tool (like VM Log Insight) we can just add it but still retain correlation where needed.

It really helps that Kiwi is extremely cost effective

bobmarley · Answer

I don't use Syslog into Orion any longer so don't know the answer but they used to be stored the the database and were easy to get.