Syslog Server on a Raspberry Pi | How to configure in a few simple steps

Syslog Server on a Raspberry Pi | How to configure in a few simple steps. In this video we take a look at the few simple steps you need to do to get your raspberry pi working as a syslog server. Once you have configured the raspberry Pi, we then look at the UDM pro to set up the forwarding of the syslogs.

Links for products (all countries):

============================================================================
Help me to bring you more great content by:

=============================================================================

Snippet of code:
if $fromhost-ip startswith "10.1.1.1" then -?unifi
& stop

Be sure to replace the ip address.

If you would like to engage InsideWire please contact me via below or my email.

Music by: Warriyo
Track name: (e.g. "Venom")

[BOOMEL]

Two questions please. I have done all of this and there is no file shown in the /var/log/unifi.log section (file not found). So I created the file and when I run tail command I get an empty file. I have enabled syslog on UDM Pro and I am not seeing anything. Secondly how do I reference a separate USB Drive within config file to store unifi.log file (when it works)? Regards / thanks

[etangy]

Hey, great video. I set this up to forward from my USG IP's right? When I check what is getting dumped, all I am getting are system logs, and not network traffic like you did. Any suggestions? Do I need a dream machine for that? I have a USG connected to a CK2. I tried editing the unfii.conf file to show logs from my CK2+ as well, but that didn't work. TIA

[mkwetters]

Thanks for the video just what I was looking for. Will this also show firewall logs from the UDM Pro?

Point of attention. You mention in the description a microSD card for you Pi. Continuously writing logs to an SD will greatly reduce its life. Better to use an SSD.

[cristicincan]

I get this error when I test log file:
cannot open '/var/log/unifi.log' for reading: No such file or directory
tail: no files remaining

I manyally checked and there is no file unifi.log in /var/log/unifi.log

I tried copy/paste you snippet code and replace ip

[GrindCoreGoreGrind]

how can i set this up to log any ip address that send it to the syslog server? i have to many devices i like to log

[frenchysg]

Do you need to restart the UDM Pro to work. You said “now we’ve restarted” @7:28.

I was expected to work on Ubuntu server, but it doesn’t, despite opening port 514 on UFW.

Also same comment you mentioned the config file in the description, but expect your affiliated linked.. not much..

Great idea, poor execution in my opinion.

[RossCanpolat]

Nice video. 2 questions.

Does syslog automatically clear itself out before space runs out on the host?

And can I forward logs from multiple devices to the same syslog server? If yes do in i just follow that template but copy the second section where you specify what server the logs are coming from and create a new "tag" and new IP for the 2nd lot of incoming logs?

I want to log Unifi & Unraid to a syslog server.

[crudge]

OK - so where is the config file you said you was going to leave in the comments? - /etc/rsyslog.d/unifi.conf <- ?