Logging Issues

[deekdeeker]

Since the upgrade to 19.7 remote logging seems to be very broken. I have disabled remote syslog from settings--> Logging and now using the logging / targets.

Im my case I only have suricata selected (nothing selected in levels & facilities) apparently this means all I have  UDP 4 connection to my logging server over a vpn tunnel.

via suricata i have the eve output selected and if i view the logs from Opnsense, suricata logs i can see that logs are present. I do not receive these logs to my logging server. I have tested connectivity to the logging server that is ok. I can see in the log that the connection is edtablished. syslog connection established; fd='25', server='AF_INET(10.11.0.1:5151)', local='AF_INET(0.0.0.0:0)'

Any insight is appreciated - i did upgrade from 19.1.10 which was working great using the old logging configuration

[deekdeeker]

arrgh i think this might be a non - OPNsense issue now that im looking at the logging server.