Administration Guide › Logfiles › Write to a Syslog Server

Write to a Syslog Server

CA DataMinder can send log messages to Syslog servers such as CA Enterprise Log Manager or ArcSight. To enable this, you need to edit the local machine policy to specify the message format and log level and to identify your Syslog server.

You can specify up to three different Syslog servers in the local machine policy. That is, you can simultaneously copy CA DataMinder log messages to three different Syslog servers.

Note: This help topic uses the term 'Syslog server' to refer to the Syslog receiver, also commonly known as a syslogd or syslog daemon.

To set up external logging to a Syslog server, you must edit the machine policy. You can set a default log level, and you can also specify a custom log level for individual logs:

Default log level

The Write to Syslog Server setting determines which log messages are copied to a Syslog server. Find this setting in the Infrastructure > Logging folder. More.

You can set this to 'None' so that no messages are copied, or you can choose 'Errors Only', 'Errors and Warnings', or 'All Messages'. But note that you can also specify a custom log level for each individual log; this overrides the default log level—see below.

Custom log level for individual logs

For each log maintained by the CA DataMinder infrastructure, a Log Detail setting lets you set a custom log level. This specifies which messages are copied to a Syslog server and overrides the default log level. In each case, you can choose 'None', 'Errors Only', or 'Errors and Warnings'. You can also choose:

• 'Use Default' to use the default log level defined by the Write to Syslog Server setting.
• 'All Messages'. Any message written to the CA DataMinder log is also copied to the Syslog server.

Configure the machine policy

For infrastructure-maintained log files only.

To enable external logging to a Syslog server

1. In the Machine Administration screen, select the machine you want and open the Machine Policy Editor.
2. Browse to the Infrastructure, Logging policy folder.
3. Set the default log level: Edit the Write to Syslog Server setting.
4. Set custom log levels for individual logs: Do the following:
   1. Browse to the Infrastructure, Logging, External Logging, Syslog n policy folders.
   2. Edit the Log Detail settings as required.
5. Configure the Syslog integration: Still in the External Logging, Syslog n policy folder, edit the settings that specify the Syslog server, the server and client ports, and the message protocol, format and maximum length.
6. Click to save your policy changes.

More information:

Logfiles

External Logging Settings