Router not sending to remote Syslog

lcx · Wed Dec 02, 2009 10:59 am

I have a RB1000 set up with remote syslog.

# dec/02/2009 09:55:57 by RouterOS 4.2
#
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=yes name=remote remote=89.190.210.67:514 src-address=0.0.0.0 syslog-facility=daemon syslog-severity=auto target=remote

/system logging
add action=memory disabled=no prefix="" topics=error
add action=memory disabled=no prefix="" topics=warning
add action=memory disabled=no prefix="" topics=critical
add action=memory disabled=no prefix="" topics=info
add action=remote disabled=no prefix=TXRouter topics=info,warning,critical,firewall,error

I started a packet sniffer and I see no connection at all to my remote syslog. Also tried bsd-syslog=no but also no luck.
And I also tried to set the src-address, also no luck.
What am I doing wrong ?

Wed Dec 02, 2009 11:32 am

You need to set topic separately,
like topic=info action=remote,
topic=firewall action=remote.

Then information should be sent, right now router is waiting for the log entry with topics=info,warning,critical,firewall,error, but there is no such.

lcx · Wed Dec 02, 2009 7:58 pm

aaaa ok. got that from the wiki.
I will try it out and if it works I will also update the wiki.

lcx · Wed Dec 02, 2009 8:06 pm

unfortunately it still doesn't work.
Config now looks like this:

# dec/02/2009 19:05:21 by RouterOS 4.2
#
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=89.190.210.67:514 src-address=0.0.0.0 syslog-facility=daemon syslog-severity=auto target=remote
/system logging
add action=memory disabled=no prefix="" topics=error
add action=memory disabled=no prefix="" topics=warning
add action=memory disabled=no prefix="" topics=critical
add action=memory disabled=no prefix="" topics=info
add action=remote disabled=no prefix=TXRouter topics=error

lcx · Wed Dec 02, 2009 8:59 pm

got it now. I think the Problem is fixed with RouterOS Version 4.3 (http://forum.mikrotik.com/viewtopic.php?f=2&t=36978)

This seems to be the problem.
*) console - fixed logging commands: 'warning', 'error' and 'debug' were
all using 'info' topic;

The fix is to only setup a remote action for the info topic. then it works.

Router not sending to remote Syslog

Router not sending to remote Syslog

Re: Router not sending to remote Syslog

Re: Router not sending to remote Syslog

Re: Router not sending to remote Syslog

Re: Router not sending to remote Syslog