Support & Documentation

Logs: Syslog with the Stackify Agent

The following section will cover how to enable sending your Linux syslogs to Stackify to be viewed in the Logs Dashboard with an agent running on your server. To see how to enable sending syslogs without an agent on your server, see our Remote Syslog doc.

Enabling Syslog with the Stackify Agent

To enable syslog on your server, go to the server settings of the server and check the Syslog checkbox. By enabling this setting, an rsyslog.conf file will be created in the /etc/ directory. You can edit this file for some additional configurations around your syslogs.

Additional Configurations

It is possible to forward to a TCP port by modifying the line:

*.* @@;RSYSLOG_SyslogProtocol23Format

It is also possible to omit the messages format:

*.* @

Enabling Syslog Manually 

Enabling Syslog Support with the Stackify Agent

You can also edit your rsyslog.conf file manually and the agent will pick up these settings. To enable syslog for Stackify manually, you should take the following steps:

In a text editor, add a single line in the /etc/rsyslog.conf file:

*.* @;RSYSLOG_SyslogProtocol23Format

Restart the rsyslog service:

sudo service rsyslog restart

Restart the stackify-agent service:

sudo service stackify-agent restart

Rsyslog will now forward all the messages to UDP port 10514. The Stackify Agent will create a listener on the specified port and process incoming messages. You can use any port number greater than 1024 to bind to the Stackify agent.

Note: The port cannot not be used by any other application.

Note: Stackify Agent does not have established permissions for listening on privileged ports, which is why the port number must be greater than 1024.

Note: Use your IP address instead of a hostname in the rsyslog.conf. file.

Setting up Defaults via the Log Collectors Page

Enabling Syslog in Stackify

You can enable syslogs per server in the server settings as mentioned earlier, or you can enable it globally for all new and existing servers in the Log Collectors page. By turning on the Syslog settings, all new servers that you install will have syslog enabled by default. By clicking on APPLY at the top of the page will enable the setting on all existing servers. See this doc for more information.

A Note About Syslog Errors

Once properly configured, Syslog will be able to send all log messages to Stackify. Although these messages can come in at different log levels such as DEBUG, INFO, ERROR, etc., since they are not coming in as exceptions, syslog errors will not appear in the Errors Dashboard. Support for exceptions in the Errors Dashboard is currently planned for a near-future release; please contact with any questions regarding the planned functionality.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request


Powered by Zendesk