Logging function - Syslog or else?

GiuseppeR

Hello everyone,

as per law request I need to send logs of my ORGs to a Company that saves them for months following specific retention policies.

Which sort of logs I can use with Nebula?

Is there a way to send them automatically somewhere else, like a syslog server?

When you have large networks like this one:

it would be nice to log everything, like who is gone where and when.

Not only management logs, to be clear.

In this way you can use an external logbox to understand what is going on there mixing data with servers and clients.

Please let me know

Zyxel_Melen

Hi @GiuseppeR

The syslog server setting is on Site-wide settings page > Reporting.

Please note that after configure it, the device will send the logs to the syslog server directly.

GiuseppeR

Hi @Zyxel_Melen

Thanks for this trick.

1. Once the syslog is enabled is it possible to maintain a copy of the logs still inside Nebula?
2. Having a lot of ORGs inside Nebula and choosing only one syslog server from a specific third party Company, how can we differentiate logs from a specific ORG on Zyxel? Is it possible to add a specific prefix to all logs from a chosen ORG?
3. If it is enabled SecuReporter traffic log like below, will be possible to send traffic log ALSO to a syslog?

Thanks in advance