Log Exporter

[bob111]

Hello I am sending logs from a log exporter on a firewall to a virtaul machine with udp on port 514. How can I save the logs in a file on the vm

Or how can I make it be saved by syslog (in /var/log/messages)?

[Joseph_Audet]

You will need some kind of syslog server listening and configured to capture the logs you are sending from your management server where you have log exporter configured. Most linux distro's come with rsyslog / systemd-journald installed.

An example config from a site (any information contained within external sites is not recommended or supported by Check Point - use at your own risk):

https://likegeeks.com/linux-syslog-server-log-management/

Thanks!