Syslog within a Multiple Vsys environment

a.jones — Mon, 04 Oct 2021 09:09:47 GMT

Hi All,

I have a pair of 5220's, running version 10.0.7 and we are running multiple vsys's on it.

We need to set up syslog on one particular vsys to send log data to a service within that environment.

I have configured this but the syslog data seems to be heading out of the management interface and not the designated interface.

For configuration I have:

1. Configured Device>Server Profiles>Syslog with a syslog server with location of the vsys. I had to duplicate this to shared for reason below.

2. My existing Log Forwarding profile for this vsys was updated to the vsys named Syslog Server.

3. Device>Log Settings has been updated to add the named Syslog server - only the shared instance as the Vsys syslog server does not appear in the list.

4. The Syslog Service Route for that vsys has been changed to the interface required for the syslog server traffic.

All rules have been configured for log forwarding and this is working.

The syslog server does not send traffic out of that interface but the management interface when checking the logs.

Any ideas?

Regards

Adrian

Re: Syslog within a Multiple Vsys environment

SutareMayur — Wed, 20 Oct 2021 07:48:48 GMT

Hi @a.jones ,

Are you managing your firewall configurations from Panorama server ? If yes then please check if Panorama pushed template configuration on local firewall is overridden.

Re: Syslog within a Multiple Vsys environment

mitchgreen — Tue, 14 Mar 2023 10:29:18 GMT

Hi Adrian - how did you go with this?

topic Re: Syslog within a Multiple Vsys environment in General Topics

Syslog within a Multiple Vsys environment

Re: Syslog within a Multiple Vsys environment

Re: Syslog within a Multiple Vsys environment