[SOLVED] Remote Syslog (not gettting outbound packets)

Started by cmmh, February 01, 2021, 11:19:56 PM

Previous topic - Next topic
Sorry for the question, probably an obviously solution that I've missed. 

i've set up syslogging to my remote system, on the LAN interface.  My remove receiver is getting logs for other appliances and devices without issue.  I have been unable to get any message from opnsense, though.

I've tried tcpdump-ing on opnsense, and I don't seeing any packets going out.  The counters on the "System: Settings: Logging / targets" statistics page show packets going out. 

For what its worth, I have this problem with 20.7.xxx series, so this isn't specifically a 21.1 issue, I don't think. 

What am I missing ?  Thanks in in advance. 

Is this a hint as to whats wrong:
root@core-router:/usr/local/etc/syslog-ng.conf.d # ls -ltr
total 12
-rw-r-----  1 root  wheel  245 Jan 31 19:21 legacy.conf
-rw-r-----  1 root  wheel    0 Jan 31 19:21 syslog-ng-destinations.conf
-rw-r-----  1 root  wheel    0 Jan 31 19:21 syslog-ng-local.conf
-rw-r-----  1 root  wheel  259 Jan 31 19:21 syslog-ng-lockout.conf
-rw-r-----  1 root  wheel  346 Jan 31 19:21 syslog-ng-config-events.conf

The "syslog-ng-destinations.conf" is zero length? 

Yes, that was the clue.  With the file empty, it was not sending anything to the remote syslog server.

I deleted the remote target and re-added it, and it worked this time.  Unsure what it didn't work the first time and worked now.  I'd say something is flaky.