Syslog Server ! :-)

[Zouk !]

Hey,

What a good surprise to receive an e-mail from Synology announcing a new DSM !
SynoTeam really impress me with these new packages and keeping this incredible DSM update rhythm !
Can't wait to test this syslog server !
It will be SO useful, at least for me. (currently downloading)

Best Regards,
Zouk !

[gd11_be]

Indeed ! The people from Synology area really doing a great effort ! Lots of new features ! Excellent !

[ZeusII]

yeah, I was looking over to setup "manually" a syslog server but hey, this is better.


also it's nice to see the permission control for the vpn service

[jekyll]

I've been waiting for syslog for a few years now, works excellent with Cisco SPA942 / APC AP9617 AP9619 AP7920 & AP7921!

Thanks Synology.

[mlourenco]

Tested and it works like a charm!

[rodef]

How do I access the Syslog server? I can't find it in Control Panel and it displays no results when I search in DSM.

EDIT: Found it - it's a Synology Package!

[Zouk !]

Now tested,

Working great but SynoTeam, you should consider to add filter to show only relevant events helping to show only events from a source or only for some level (ie tick box level to show or to hide them).
I know that the search function can mostly do this but its a not very convenient compared to a real time filter which still applies when you refresh the log page.

Hope it will be added to final version or for the next one.
 

[nik_c]

Hi, Can i get this syslog package also for my DS211J? When I go to the synology package page, it is not listed as an option there (unless I miss it and it actually not called anythng like syslog server)?

Thanks,
NIk C

[sjeph8je]

You will have to wait until DSM 3.2 is released or install the beta 3.2 to use the new package center which has the syslog package.

[mbryanr]

Works great with a unRAID server (which uses Slackware - syslogd, not the newer syslog-ng that the Syno uses). Filter would be a nice addition to the Synology package.

Here is a script for the unRAID if anyone wishes to use it:
http://lime-technology.com/forum/index. ... 5#msg83695

[cread]

does anyone know of a way to have the DS log to it's own syslog server (so that all logs are in one place)?

And

Is there a way to log events in php to a syslog server.\?

I have looked online, but most of the info pertains to a desktop/server install of linux, not the DS and involves a lot of hackery. I do not object to some, but I am trying to keep this to a minimum.

TIA

[dahlb]

cread,

add these two lines:

destination d_syno_net { udp("127.0.0.1" port(__SYNO_PORT__)); };
log { source(s_system_local); destination(d_syno_net); flags(flow_control); };

to

/volume1/@appstore/SyslogServer/etc/template/system.conf

and reboot the synology, this assumes your using the udp option if you're using the tcp option just change udp to tcp

[cread]

cread,
add these two lines:
destination d_syno_net { udp("127.0.0.1" port(__SYNO_PORT__)); };
log { source(s_system_local); destination(d_syno_net); flags(flow_control); };
to
/volume1/@appstore/SyslogServer/etc/template/system.conf
and reboot the synology, this assumes your using the udp option if you're using the tcp option just change udp to tcp

Thanks, I was hoping for something a bit less hacky, but once I understand this I will give this a try. The update seems to be a configuration change to the syslog server and not to the DiskStation syslogger itself. Is this correct and if so how does changing the server get the data to the server. Is local logging a feature of the server that Synology just did not enable?
Thanks for any info you can give me.

[maxxfi]

As far as I can see, by default the syslog server has two simple rules:
1. save internal syslog messages to the usual text file /var/log/messages
2. everything coming from UDP port 514 (i.e. standard syslog port) goes to a sqlite database
that you can browse with the package tools, etc.

So it's already managing the internal messages, since when you install the package.

The dahlb's additional rule simply tells that the internal syslog messages
should be also forwarded to local port 514 (so that they are catched by the 2nd rule)

[dahlb]

Sorry, for taking a while to get back to you, I didn't get any notification about replies from the forum.

cread:
the files in /volume1/@appstore/SyslogServer/etc/template/*
are used to build both
/usr/syno/etc/synosyslog/system.conf and /usr/syno/etc/synosyslog/syslog.d/syno.conf
which is why I had to restart the synology for the change to take affect, otherwise any changes would be lost on restart
local logging to the local server is just a feature synology's default settings don't turn on; if your looking to make more changes you can read about the syntax by googling syslog-ng, that is the server synology is using for their network log server.

maxxfi:
if you configure in the web ui email notifications your logging server will also have this line
log { source(s_syno_net); filter(f_syno_nonemptymsg); filter(f_syno_mail); destination(d_syno_mail); flags(flow_control); };
which emails anything from net to the configured email, the nice thing about the change I did was it now includes any local synology logging gets forwarded to that same email