Using Sentinel Collectors as Syslog Servers

Using Sentinel Collectors as Syslog Servers


A Forum reader recently asked:

"Are the Sentinel collectors are capable of acting as a syslog server to collect the log? Or do we need a 3rd-party syslog server to perform that activity?"

And here's the reply from Oscar Castro ...


Sentinel 5.1.3 has a Syslog server that is actually a syslog proxy. You can find it on SENTINEL_HOME/wizard/syslog, but you have to install it by running the appropriate command: (install for Linux or Solaris)

syslog-server.bat (install for windows

Additionally, you have to configure or SyslogConnectorAgent.bat for communication. This process is the one you configure on the port on the collector manager. Don't forget to start the service "Sentinel Syslog Server" after the installation, because it doesn't start automatically on either UNIX or Windows. In the wizard documentation you can find more information about the
syslog server.

If you are using Sentinel 6, the syslog server installs itself by importing a syslog connector plug-in and configuring a new collector that uses a syslog connector, with all the parameters put there.

In the live view you can see the syslog server, and you can start it and stop it as you want.

David Corlette adds:

Technically speaking, the Sentinel v6 Syslog Connector has two parts: the syslog server (called an "Event Source Server" [ESS]) and the Connector itself. When you deploy the Connector, you are also asked to deploy an ESS. The Server listens on a configurable UDP, TCP, or SSL port (it's actually a generalized socket server), and you can have more than one ESS if you have multiple streams of inbound data. Events received on that port are placed in a buffer.

The Connector connects to the buffer and requests events that match a specific filter, defined when you configure the Connector. Note that in some cases if you "mix" events from different sources (SLES and Solaris, say) into one Syslog ESS, it can be difficult to separate the streams again and send them to the appropriate Collector. To solve this, set up multiple ESS's listening on different ports and configure each type of Event Source to send data to a different ESS/Connector/Collector.
Tags (1)


Some content on Community Tips & Information pages is not officially supported by Micro Focus. Please refer to our Terms of Use for more detail.
Top Contributors
Version history
Revision #:
1 of 1
Last update:
‎2007-11-14 12:49
Updated by:
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.