Viewing Syslog Messages

AirWave allows you to specify an external syslog server for storing audit and system events. After the external server is set up, everything written to the AirWave Event Log and audit logs will be sent to a specified syslog server.

You can find the AirWave event log on the System > Event Log page and at /var/log/amp_events from the AirWave command line.

To set up an external server:

  1. Navigate to the AMP Setup > General page and scroll down to the External Logging section.
  2. Enter the IP address and port value of the syslog server.
  3. Specify Yes for the Include Event Log Messages option.
  4. Select an Event Log facility from the drop-down list. Typically, facility identifiers local0-local7 are available to the administrator to use as "custom" identifiers. An exception is local5. On some systems, ftpd defaults to local.

    Messages "tagged" with these identifiers can be sorted by the syslog server into separate log files. You set this up on the syslog server in the /etc/syslog.conf file.

  5. Specify Yes for the Include Audit Log Messages option.
  6. Select an audit log facility from the menu.
  7. Send a test message to the syslog server.
  8. Click Save.