Full Syslog - XOA
-
Hi!
I am trying to get an archive of all errors, tasks like snapshots, VM-starts, etc. on my central syslog appliance.
What I tried is setting:[logs.transport.syslog] target = 'udp://syslog-cluster:1514'
Now, XOA is sending logs, but quite limited.
Is there any possibility to extend the logging?Thank you and best wishes
KPS -
XOA is Debian based, so if you want to send all the system logs, you can use the standard tools for a regular Debian machine
-
@olivierlambert said in Full Syslog - XOA:
XOA is Debian based, so if you want to send all the system logs, you can use the standard tools for a regular Debian machine
Thank you! I am just checking the syslog, but there is no real information about tasks or audits. The only two log-entries are currently:
Dec 22 04:07:28 xoa xo-server[389]: 2023-12-22T09:07:28.483Z xo:main INFO + Console proxy (admin@admin.net - ::ffff:10.yy.xx.44) Dec 22 04:07:49 xoa xo-server[389]: 2023-12-22T09:07:49.674Z xo:main INFO - Console proxy (admin@admin.net - ::ffff:10.yy.xx.44)
Although I did just start a migration.
-
Hmm the audit log might be different, let me ping @julien-f
-
There are just many locations for the logs and the seem to have to be handled quite different:
-
Audit-Logs:
Can be exported and so can be sent to syslog, but: I did not find a way to do that efficient, as "xo-cli get-Records" seems not to be able to use filters like "after/before". -
Pool-Log:
Is only visible in the GUI. Did not find a way to send it to syslog, or to export it periodically. -
XOA-Log:
/var/log/syslog can be exported, but is using quite nasty "multi-line-logs". -
Task-Log:
As Audit-Logs: Can be fetched by: "xo-cli rest get tasks", but did not get filters working, yet.
It would be perfect to have options to send directly to syslog, but a workaround through a periodically running script could be good, too.
-