Setting Up the Edge Filer Syslog Service

To set up the Edge Filer Syslog service:

1. In the global administration view, select Services > Edge Filer Syslog in the navigation pane.
   The EDGE FILER SYSLOG page is displayed.
   

2. Click Add a Server to define the Syslog Server:
   The New Syslog Server window is displayed.
   
   Address – The address of the Syslog server.
   Port – The syslog server's port number. The default port used by a syslog server when Protocol Type is UDP is 514. The default port used by a syslog server when Protocol Type is TCP/TLS is 6514.
   Protocol – The protocol to use for sending logs to the syslog server: UDP or TCP/TLS.
   If TCP/TLS is chosen the New Syslog Server window changes:
   

   1. Click Client Certificate to upload the client certificate.
      
   2. Click Select File to select the .pem file client certificate to use.
      Note

      Only pem files are allowed.

   3. Click Select File to select the private key. The private key must match the certificate.
   4. Click Server Certificate to upload the server certificate.
      
   5. Click Select File to select the .pem file server certificate to use.
      Note

      Only pem files are allowed. The certificate must match the client certificate.

   6. Click SAVE.

   If there is a problem with the TCP connection or with the TLS certificate, for example the client and server certificates do not match or a certificated has expired, an error is displayed, with additional information written to the system log.

   Alert if lag exceeds – The number of messages that are not sent to the Syslog server before an alert is issued,

3. Click SAVE.
   The server is added to the list of servers.
   
   The STATUS field is Unknown if the UDP protocol is used and either Connected or Not Connected if the TCP protocol is used.

4. Click Enable in the status bar.
   The Edge Filer Syslog service starts.
   
   When the service has finished starting the status changes to Active and RUNNING OK.
   

5. Enable CIFS/SMB Audit Logs on every CTERA Edge Filer you want to use with the Edge Filer Syslog service.