topic Re: System logging on Maestro in Hyperscale Firewall (Maestro)

System logging on Maestro

IdentityUnknown — Tue, 28 Mar 2023 07:26:59 GMT

Hi guys,

I am struggling with the configuration of the following parameters on a MHO/Security Group.

set syslog filename /var/log/messages

set syslog cplogs on

set syslog mgmtauditlogs on

On the Management Server I do not see any messages in the audit log from the MHO/Security Group.

How to configure it?

Kind regards

Re: System logging on Maestro

_Val_ — Tue, 28 Mar 2023 07:44:22 GMT

@Anatoly, @Lari_Luoma can you please advise?

Re: System logging on Maestro

Chris_Atkinson — Wed, 29 Mar 2023 01:27:56 GMT

MHO as different to the SG has no SIC with Management as described in sk173285. Have you configured it (Mgmt) to receive/accept syslog?

Which version & JHF is the system deployed with?

Re: System logging on Maestro

IdentityUnknown — Tue, 28 Mar 2023 13:00:52 GMT

Thank you. I forgot to configure the line "add syslog log-remote-address <SIEM Server/CMA/SMS/Log Server IP> level all on my MHOs. I used the Log Server IP, and I have to filter with blade:syslog to see all other syslogs as well.

Re: System logging on Maestro

Lari_Luoma — Tue, 28 Mar 2023 15:20:42 GMT

Even I have never configured syslogs on MHO, but the process shouldn't be different from regular Gaia.