Highlighted
Absent Member.
Absent Member.
294 views

How to enable syslog in rhel to forward all events

How to enable rhel to fwd all its logs to arcsight smarrtconnector via syslog? I entered *.info in syslog.conf, but not getting mych events...

Labels (1)
0 Likes
3 Replies
Highlighted
Established Member..
Established Member..

Re: How to enable syslog in rhel to forward all events

*.* @@1.1.1.1:514

This forwards everything. You need to make sure that things are getting audited first in the system otherwise you won't see everything.

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: How to enable syslog in rhel to forward all events

How to enable auditing? We are looking for log in log out , and other activities....

- Vishal K

Sent from Mobile Phone

0 Likes
Highlighted
New Member.

Re: How to enable syslog in rhel to forward all events

Hi,

you need to read chapter 7 of RHEL Security Guide.

See Security Guide for more information.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.