Sending serverevents.txt to another syslog server

Bojan 17
Viewed 0

Hello,

Is it possible (and how) to regularly send audit file (serverevents.txt) to another syslog server for further processing?

Thank you and Best Regards,

Bojan

p.s. We are using PA File Sight Ultra, version 4.2.1.44

send secureevents syslog file-sight
1 Answers

The best way I can think of is to attach a Syslog Sender action to the File Sight monitor instead of/along with the Write to Log File action you are currently using to create the serverevents.txt file. That way you'd get near-real time events flowing directly from the File Sight monitor to your syslog processor, without a stop in a the log file in between.

Doug1126

Hi Doug,

thanks for this - will try it out and report back...

:)

Bojan•

Hello All,

the proposed solution worked fine :). Thanks again, Doug.

Bojan•

Glad to hear it. Please mark the answer as accepted (the check mark at the right) so others will see at a glance that it worked.

Doug•
Related