I am using SolarWinds Event Log Forwarder to forward mainly security and application logs from different server to a Kiwi Syslog Server (v9.5)
Management flagged out to me that one of the server which stored Microsoft SharePoint logs is full and discuss on forwarding SharePoint logs to the Syslog Server.
I am not getting much success using the Event Log Forwarder as the logs forwarded are unrelated so I suspect that the configuration needs to be done on the SharePoint itself to forward the logs. I have no experience with SharePoint
Anybody with experience with SharePoint that is able to help me on how to forward logs to the Syslog Server will be greatly appreciated.
I'm not a Sharepoint expert but I don't believe it puts logs into the Event Logs. The Solarwinds Log Forwarder can only read the event logs. To forward disk based logs you need an agent like NXlog(https://nxlog.co).
I'd also verify the logging configuration on the Sharepoint server - Configure diagnostic logging in SharePoint Server | Microsoft Docs
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.