OPNsense Forum

Archive => 21.1 Legacy Series => Topic started by: cmmh on February 01, 2021, 11:19:56 pm

Title: [SOLVED] Remote Syslog (not gettting outbound packets)
Post by: cmmh on February 01, 2021, 11:19:56 pm
Sorry for the question, probably an obviously solution that I've missed. 

i've set up syslogging to my remote system, on the LAN interface.  My remove receiver is getting logs for other appliances and devices without issue.  I have been unable to get any message from opnsense, though.

I've tried tcpdump-ing on opnsense, and I don't seeing any packets going out.  The counters on the "System: Settings: Logging / targets" statistics page show packets going out. 

For what its worth, I have this problem with 20.7.xxx series, so this isn't specifically a 21.1 issue, I don't think. 

What am I missing ?  Thanks in in advance. 
Title: Re: Remote Syslog (not gettting outbound packets)
Post by: cmmh on February 02, 2021, 11:28:04 pm
Is this a hint as to whats wrong:
root@core-router:/usr/local/etc/syslog-ng.conf.d # ls -ltr
total 12
-rw-r-----  1 root  wheel  245 Jan 31 19:21 legacy.conf
-rw-r-----  1 root  wheel    0 Jan 31 19:21 syslog-ng-destinations.conf
-rw-r-----  1 root  wheel    0 Jan 31 19:21 syslog-ng-local.conf
-rw-r-----  1 root  wheel  259 Jan 31 19:21 syslog-ng-lockout.conf
-rw-r-----  1 root  wheel  346 Jan 31 19:21 syslog-ng-config-events.conf

The "syslog-ng-destinations.conf" is zero length? 
Title: Re: Remote Syslog (not gettting outbound packets)
Post by: cmmh on February 04, 2021, 11:35:30 pm
Yes, that was the clue.  With the file empty, it was not sending anything to the remote syslog server.

I deleted the remote target and re-added it, and it worked this time.  Unsure what it didn't work the first time and worked now.  I'd say something is flaky.