After upgrading our Solarwinds Orion from 2020.2.6 to 2023.3.1, we are no not able to see any syslog in Log Viewer. We are also not seeing Filters. Does anyone know what the issue could be?
After upgrading our Solarwinds Orion from 2020.2.6 to 2023.3.1, we are no not able to see any syslog in Log Viewer. We are also not seeing Filters. Does anyone know what the issue could be?
2020.2.6 was the "last version" with the legacy syslog viewer tool. all this has been now moved to LogViewer/LogAnalyzer. Can you please share where you are expecting the syslogs to show up so we can confirm it's really the case of "Legacy Syslog viewer" vs "LogViewer/LogAnalyzer"
cheers
We are expecting to see the syslogs in the "Log Viewer"
I am assuming this is the "log viewer" you are talking about? You can also reach it from here:
Alright, so we figured out this is the "new" Logviewer. Now we need to check if the Services on the Solarwinds Server are running:
The corresponding services is the "SolarWinds Log manager for Orion Syslog Service" . If this is running we need to check if there could be a "discard all" rule" or maybe a firewall rule blocking syslogs from reaching the solarwinds service.
you can also check via netstat -ano if the service is listening on the syslog port:
The "SolarWinds Log Manager for Orion Syslog Service" is running.
There is no discard rule or firewall blocking syslog service.
Are the devices sending Syslog messages added to SolarWinds as nodes?
other than that it is getting a tough one to support through the forum, trying to think of other possibilities causes…
I know that originally it is said that this stopped working after the upgrade but it is still worth confirming that we are actually receiving syslog to the SolarWinds server in the first place. rccamacho could you please set up a packet capture on the SolarWinds server and monitor to see if we are receiving any packets over port 514? I usually would use Wireshark for this.
I know it would be a crazy coincidence that something changed on the network at the same time as the upgrade but this is technical support after all so lets apply Occam's Razor.
It would be strange if SolarWinds' Syslog service was running fine but not processing the Syslogs received to it.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 200,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.