View and Export syslog messages

You can now view syslog messages without logging into Citrix Application Delivery Management (ADM), by scheduling an export of all syslog messages received on the server. You can export syslog messages that are generated on your Citrix Application Delivery Controller (ADC) instances in PDF, CSV, PNG, and JPEG formats. You can schedule the export of these reports to specified email addresses at various intervals.

Note

For more information about configuring a syslog server, the syslog data and time format, and how to view syslog messages on Citrix ADM, see View Auditing Information.

To view syslog messages, navigate to Networks > Events > Syslog Messages. In the right pane, under Syslog Viewer, you can filter the syslog messages you want to view by module, event type, severity, and source IP address. Click Apply to generate the syslog messages.

To export a syslog messages report by using Citrix ADM:

  1. Navigate to Networks > Events > Syslog Messages.

  2. In the right pane, click the export button at the top right corner of the Syslog Messages page.

  3. Under the Export Now tab, select the required format, and then click Export.

    Export

To schedule the export of syslog messages report by using Citrix ADM:

  1. Navigate to Networks > Events > Syslog Messages.

  2. On the Syslog Messages page, in the right pane, click Export.

  3. Under the Schedule Report tab, set the following parameters:

    • Description: Message describing the reason for exporting the report.

    • Format: Format in which to export the report.

    • Recurrence: Interval at which to export the report.

    • Export Time: Time at which to export the report. Enter the time in a 24 hour format, for your local time zone.

    • Email Distribution List: List of recipients to receive the report by email. Choose an email distribution list from the menu provided. An email is triggered when the report is generated and meets the scheduled time criteria.  If you want to create an email distribution list, click + and provide mail server and mail profile details.

    Schedule-export

Search syslog messages

You can use filters to search syslog messages and audit log messages to narrow down your results and find exactly what you are looking for and in real time.

To search syslog messages for all ADC instances present in the ADM software, from the ADM GUI, navigate to Networks>Events>Syslog Messages. The new filter categories are instance, module, event, severity, and message.

To search all ADM system audit log messages present in the ADM software, from the ADM GUI, navigate to Account > Audit Log Messages. The new filter categories are instance, module, event, severity, and message.

Log-message-filter

To search audit log messages for all applications present in the ADM, from the ADM GUI, navigate to Networks > Network Functions > Auditing.

To search audit log messages for a specific application on the ADM, from the ADM GUI, navigate to Application > Dashboard and select the virtual server for which you want search the audit log messages. Next, click the Audit Log tab.

Log-message-filter-2

After you select a filter category, specify if it equals to or contains the search term.

Log-message-filter-2

Next, add the search term. For some categories, a prepopulated list of search terms is displayed. By default, the search time is 1 day. You can change the time and date range by clicking the down arrow. You can further narrow down your search by selecting options from the Syslog Summary or Audit Log Summary pane.

Log-message-filter-2

Search syslog messages

You can use filters to search syslog messages and audit log messages to narrow down your results and find exactly what you are looking for and in real time.

To search syslog messages for all ADC instances present in the ADM software, from the ADM GUI, navigate to Networks>Events>Syslog Messages. The new filter categories are instance, module, event, severity, and message.

To search all ADM system audit log messages present in the ADM software, from the ADM GUI, navigate to Account > Audit Log Messages. The new filter categories are instance, module, event, severity, and message.

Log-message-filter

To search audit log messages for all applications present in the ADM, from the ADM GUI, navigate to Networks > Network Functions > Auditing.

To search audit log messages for a specific application on the ADM, from the ADM GUI, navigate to Application > Dashboard and select the virtual server for which you want search the audit log messages. Next, click the Audit Log tab.

Log-message-filter-2

After you select a filter category, specify if it equals to or contains the search term.

Log-message-filter-2

Next, add the search term. For some categories, a prepopulated list of search terms is displayed. By default, the search time is 1 day. You can change the time and date range by clicking the down arrow. You can further narrow down your search by selecting options from the Syslog Summary or Audit Log Summary pane.

Log-message-filter-2

How to Configure Events Prune Settings by Using Citrix ADM

To limit the amount of event messages data being stored in your Citrix ADM server’s database, you can specify the interval for which you want Citrix ADM to retain network reporting data, events, audit logs, and task logs. By default, this data is pruned every 24 hours (at 00.00 hours).

Navigate to System > System Administration. Under Instance Settings, click Events Prune Settings. Enter the time interval, in days, for which you want to retain data on the Citrix ADM server and click OK.