USG FLEX 50 log format for a Synology log server

segFaultCreat0r · January 10

Hi !

I'm trying to send my USG FLEX 50 logs to a Synology log server but I'm struggling with the format.

Both "Syslog" and "CEF/Syslog" appear to not be supported by Synology, as values are not mapped properly.

There is, in the Synology log server settings, an option for a custom format using a pattern parser (for example @STRING:Hostname:@), but I cannot seem to find how to make it work, despite having used pretty much anything I could find in the syslog-ng documentation (linked in the Synology logs docs)

Has someone successfully sent their USG FLEX logs to a Synology NAS in a usable form ?

Thanks.

Caroll · January 13

Hi @segFaultCreat0r, have you tried using another syslog server, like https://sourceforge.net/projects/syslogserverwindows/ , to see if the logs are being mapped correctly? This could help determine if the issue is specific to Synology's log server.

Also, in another thread, someone mentioned successfully sending logs from a Zyxel ATP firewall to a Synology log server. You might find their configuration helpful:
SYSLOG from ATP to Synology — Zyxel Community

USG FLEX 50 log format for a Synology log server

All Replies

Categories

Security Help Center