Syslogd Intro
Overview
The Unified Assurance Event Syslog Aggregator is a generic syslog message listener that receives messages from devices, parses the results with customizable rules and creates de-duplicated events within Unified Assurance.
This page provides you with a basic overview. For more details refer to: Unified Assurance Event Syslog Aggregator Advanced
Syslog Aggregator Setup
-
Review the logic in the rules files referenced in the configuration to see the processing that will be done when syslogs are received:
-
"LoadRules" will be run during application startup to load data that might be needed during processing.
-
"IncludeRules" will be read during application startup to load additional files that might be called during processing.
-
"BaseRules" will be run for each syslog that is received.
Update the logic as needed.
-
-
Enable the default Service, unless a specific configuration option is needed.