¶ How to Review the System Logs and Configure Syslogging.
VergeOS records user initiated and automated activity and displays it in the system Log. System logs can be reviewed from the Main Dashboard at the bottom of the page or by selecting the Logs button in the left navigation menu.
VergeOS keeps logged activity for a maximum of 45 days. Logs can be exported out of the system by configuring a 3rd party log collection service for long-term record keeping.
To configure a 3rd party system logger;
- Select System in the left navigation menu from the main dashboard
- Inside of the System menu select Settings in the left navigation menu
- Select Advanced Settings on the left
- Search "syslog"
- Select and edit "Remote syslog server (tcp: @@name/ip:port, udp: @name/ip:port)"
- Configure that setting following the implied syntax in the setting name.
Examples: For TCP: @@10.10.10.10:514 or For UDP: @10.10.10.10:514 - Search "syslog"
- Select and edit "Template to define for syslog server (See rsyslog for format)"
- Enter a syslog template format that is compatible with the syslog server
Example:
GRAYLOGRFC5424,"<%PRI%>%PROTOCOL-VERSION% %TIMESTAMP:::date-rfc3339% %HOSTNAME%.HOSTNAME_HERE %APP-NAME% %PROCID% %MSGID% %STRUCTURED-DATA% %msg%\n"
For more information on syslog templates visit the Rsyslog Website.
Additionally, in many areas of the platform, such as a specific VM dashboard, there is a Logs button to view only logs specific to that context. This is often helpful in filtering out many logged events that aren't relevant to a specific area of the platform.
The log in the following screenshot shows several specific events as examples of logged activity.
- From the entry time-stamped on March 28th, 2022 at 9:21:35, there is a record of the IP address from where the admin user logged in (IP address) and the date and time of the login.
- From the entry time-stamped on March 28th, 2022 at 9:21:55, this log entry recorded that the user named 'admin' had the password changed from the root environment (parent system) above this tenant.
- From the entry time-stamped on March 28th, 2022 at 9:22:53, the user, admin, changed their own password in this environment.
Need more Help? Email support@verge.io or call us at (855) 855-8300