Re: setting up my IBM i to push syslog entries to an external SIEM server.

So,
I am working through the setup of Syslogd.
I have a .conf file, and have started the daemon job.
upon start, I get a "Jan 27 08:44:59 knapa syslog:info syslogd: restart"
message in my log file.
however, when I try a "logger", or "Syslog" commands, nothing shows
up in the log.

what format or magic spell do I use to make logger work?



On Thu, Jan 27, 2022 at 6:23 AM Rob Berendt <rob@xxxxxxxxx> wrote:

https://www.ibm.com/support/pages/node/634791


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Gerald Magnuson
Sent: Wednesday, January 26, 2022 5:04 PM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: setting up my IBM i to push syslog entries to an external SIEM
server.

CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know
the content is safe.


I have been tasked to "push" events and notifications on to our new SIEM
software.

I have a high level of auditing already turned on, and have extracted audit
journal data via SQL in the past.

I don't really want to buy anymore software if I don't have to. Does the
IBM i have all the components to push QSYSOPR, and audit entries on to a
SIEM?
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com