Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Evaluating Kiwi Syslog Server.

Hello.

I'm evaluating version 9.2.1 because I need to modify the message when it arrives adding a string, than forwards to another syslog server using the original IP source address.

Many thanks.

Regards.

Andrea

Find more posts tagged with

Accepted answers

bshopp

If you want to retain the original source address, I’d recommend you also use the “Spoof Network Packet” option (especially a good idea, if the receiving system is not Kiwi Syslog Server). They’ll need to install WinPcap 4.1+

Here is more info:

Spoof Network Packet

This feature is only available in the licensed version, requires WinPcap 4.1+ installation

This option only applies to syslog messages forwarded via UDP protocol.

The network packet will be spoofed to appear as though the fowarded message has come directly from the originating devices' IP address, and not the address of the Syslog Server. Kiwi Syslog Server will use the Selected Network Adapter to send the spoofed UDP/IP packet.

Important Note:

This option also requires that WinPcap version 4.1 and above is installed. WinPcap (Windows Packet Capture library) is available for download from: WinPcap, The Packet Capture and Network Monitoring Library for Windows

All comments

bshopp

Do you want to remove the original message and insert a new message and then forward or keep the original message and insert another line of text?

ameconi

I need to insert a string than forward but I need a licensed version to run a script!

Many thanks.

Regards.

Andrea

ameconi

With a licensed Kiwi version 8 I can run script and forward. Anyway, with the "Retain the original source address" option checked, the receiving syslog server doesn't report the correct source IP address.

Regards.

bshopp

For 9.2.1 are you running the free version or the 30 day evaluation version. With the 30 day evaluation, you should be able to do the same as you did in v8. Try this and let me know if you see the same behavior as described in v8.