Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
RossM
Explorer
Jump to solution

Log Exporter for Endpoint Policy server

Does anyone know if log exporter works with the Endpoint Policy server?

 

I have set the log exporter settings for our 2 mgmt servers and 1 policy server and whilst the mgmt servers are sending logs successfully the policy server is not sending anything.  Running "cp_log_export show" shows as enabled and all config matches on all 3 servers   I have run a tcpdump and there is nothing going to the log server.  Is this because all the logs from the policy server are passed to the mgmt server and this is expected behaviour or is there an issue with my log exporter configuration?

 

We are running R80.40 on all three servers.

 

Thanks,

Ross.

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

Log Exporter only runs on the management/log server.
Operating System logs are not included, and you set syslog up in the Gaia WebUI/clish to forward those logs.

View solution in original post

0 Kudos
4 Replies
_Val_
Admin
Admin

Do you have logs stored on the Policy server, or are they forwarded to MGMT servers?

0 Kudos
RossM
Explorer

Yes they are all being passed to the mgmt server and nothing is saved locally.

Would this include logs for connecting to the policy server via ssh or the Gaia web portal as well?

0 Kudos
PhoneBoy
Admin
Admin

Log Exporter only runs on the management/log server.
Operating System logs are not included, and you set syslog up in the Gaia WebUI/clish to forward those logs.

0 Kudos
RossM
Explorer

That's great.  Thanks for the confirmation

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events