[Solved] Syslog enabled but no logs in share...

[andyd]

I have Syslog set up as shown below. If I check the share, there is nothing in it. I have this share on a ssd - that ssd has a logs folder, also nothing in it.

 

Is there an issue with the configuration?

 

 

Edited July 25, 2023 by andyd

[itimpi]

With those settings nothing is going to be recorded as those settings just set up the server to be listening.  There are 2 ways to get something recorded:

• use the Mirror to Flash option (normally the easiest).   In this case the results are put into the ‘logs’ folder on the flash drive..
• put the IP address of the Unraid server into the Remote syslog server setting.   In this case the results are put into folder specified in the settings.

[andyd]

Ok I enabled the last option but I'm a little confused based on the help box that appears when clicking it - what's the point of the top part if I need the bottom as well? Is it that whatever is recorded on the flash drive will be moved to local syslog server periodically?

[itimpi]

The idea of the syslog server is that any machine can send entries to it via the network, it does not generate the entries on its own.    The idea of the last two entries is to provide a way to capture syslog entries generated on the host machine.

[andyd]

Ok got it. I used the remote ip option and immediately see logs now. Thanks!

[Ronald Brinkerink]

@itimpi,

I have applied these settings but there is nothing being logged on the logs share. Should the ip address be 127.0.0.1 or the external address given by the router as in these settings? 

 

Is the mirror to flash mandatory? Am i missing something regarding the ports? Is there a simple way to test if the syslog server responds to messages? I have tried this:
```
nc -w0 -u 192.168.90.1 514 <<< "testing again from my home machine"
```

But no logs appear.

 

Thanks for your effort

Edited February 9 by Ronald Brinkerink

[itimpi]

If the remote syslog server field has the address of your Unraid server so it is logging to itself then you should see files appearing in the 'logs' share.

 

The Mirror to flash is optional, but it is often easy to set up for a short term exercise.   It has the advantage that it does not need the network or the array to be working for it to successfully log and it can also catch a bit more when things start going wrong.   The main reason for not using it on a long term basis is to avoid unneeded wear on the flash drive.