Remote Syslog Settings - 20.1.RC

[nivek1612]

Can't find anything in the 20.1 release notes but GUI in 19.7 at

System: Settings: Logging had a section for remote syslog

at 20.1.RC its missing and only Local Logging options exist

Did I miss something ?

[franco]

From the upcoming 20.1 release notes:

To prevent stale configuration files for remote syslog we advise to setup the new targets first and disable the old ones under System: Settings: Logging

https://docs.opnsense.org/manual/settingsmenu.html#logging-targets


Cheers,
Franco

[nivek1612]

Yes I missed that :-(

Mine wasn't set up anyway, so nothing to delete but what I had missed in the docs was this

"The remote logging feature will likely be removed in OPNsense 20.1, since the new Logging / targets offers more flexibility and has overlapping functionality. We advise to switch as soon as possible."

One final question now I've seen this I would have assumed the "syslog-ng" service would also be deleted (mine is still active) or is that a 20.1.1 activity/cleanup

[franco]

Syslog-ng is the main syslogger. The older "syslogd" may be removed at some later point in time depending on how we go forward dealing with circular logging support.


Cheers,
Franco

[nivek1612]

thank you all clear now

20.1.RC1 is surviving all the load testing and reboots etc that I'm throwing at it so seems very good so far

[franco]

glad to hear

[guest23316]

The updated remote logging via System>Settings>Logging/Targets is not passing firewall logs. 

Enabled - checked
Transport - UDP(4)
Application - all
Levels - all
Facilities - all
Hostname - set
Port - set

The host is receiving logs confirmed with tcpdump and a alternate moloch capture of traffic.  However, I no longer receive firewall logs since updating.  I've set application, levels and facilities to all as I debug and troubleshoot.  Any clarity or assistance would be greatly appreciated.


UPDATE///Disregard logging was disabled - everything is working now