Syslog is a standard protocol for logging. It has two components: the Syslog auditing module, which runs on the NetScaler instance, and the Syslog server, which can run either on the underlying FreeBSD operating system (OS) of the NetScaler instance or on a remote system. SYSLOG uses User Datagram Protocol (UDP) for data transfer.
Syslog enables isolation of the system that generates information and the system that stores the information. You can consolidate logging information and derive insights from the collected data. You can also configure syslog to log different types of events.
You can monitor the syslog messages that a NetScaler device generates if you configure the device to redirect syslog messages to NetScaler MAS. You can schedule a job to create syslog servers that generate different kinds of syslog data using the buit-in templates feature in NetScaler MAS.
First, configure a syslog server to which the instance can send log information. Then, specify the date and time format for recording log messages.
You can now view all your syslog messages generated on your managed NetScaler instances if you have configured your instance to redirect the syslog messages to the NetScaler MAS server. The syslog messages are stored in the NetScaler MAS server’s database centrally and will make them available on the Syslog Viewer for auditing purposes. You can consolidate this logging information and derive reports for analytics from the collected data.
You can filter this information by module, event type, and severity. You can also configure syslog to log different types of events.
To view the Syslog Viewer, navigate to System > Auditing. In the Auditing page, under Audit Messages, select Syslog Messages. Choose the appropriate filters, to view your system log messages.