Syslog is a standard protocol for logging. It has two components: the Syslog auditing module, which runs on the NetScaler instance, and the Syslog server, which can run either on the underlying FreeBSD operating system (OS) of the NetScaler instance or on a remote system. SYSLOG uses User Datagram Protocol (UDP) for data transfer.
Syslog enables isolation of the system that generates information and the system that stores the information. You can consolidate logging information and derive insights from the collected data. You can also configure syslog to log different types of events.
To limit the amount of syslog data stored in the database, you can specify the interval at which you want to purge syslog data. You can specify the number of days after which the following syslog data will be deleted from NetScaler MAS:
- Generic Syslog Data
- AppFirewall Data
- NetScaler Gateway Data
You can also configure the NetScaler Gateway purge interval by syslog type. This purge interval takes precedence over the purge interval configured to retain NetScaler Gateway data.