ASUS RT-AC66U DD-WRT -> Kiwi Syslog Server

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Author Message
The__Doctor
DD-WRT Novice


Joined: 29 Jun 2021
Posts: 4

PostPosted: Tue Jun 29, 2021 18:24    Post subject: ASUS RT-AC66U DD-WRT -> Kiwi Syslog Server Reply with quote
Hello!

Is it possible to send log messages to the remote Server via Syslog-over-TCP+TLS ?

Namely, from ASUS RT-AC66U DD-WRT to Kiwi Syslog Server (TCP 6514).
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14217
Location: Texas, USA

PostPosted: Tue Jun 29, 2021 18:38    Post subject: Reply with quote
https://wiki.dd-wrt.com/wiki/index.php/Logging_with_DD-WRT
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
The__Doctor
DD-WRT Novice


Joined: 29 Jun 2021
Posts: 4

PostPosted: Tue Jun 29, 2021 20:57    Post subject: Reply with quote
Do I understand you correctly, that using Syslog-over-TCP+TLS is not possible?
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14217
Location: Texas, USA

PostPosted: Tue Jun 29, 2021 22:49    Post subject: Reply with quote
Kiwi Syslog Server and Papertrail (both by SolarWinds) are the same thing; Kiwi is locally hosted whereas Papertrail is hosted on the internet. Kiwi is linked in that wiki. I do not understand how you failed to connect the dots.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
The__Doctor
DD-WRT Novice


Joined: 29 Jun 2021
Posts: 4

PostPosted: Wed Jun 30, 2021 3:46    Post subject: Reply with quote
https://documentation.solarwinds.com/en/success_center/papertrail/content/kb/configuration/configuring-remote-syslog-from-routers-switches-network-devices.htm?cshid=pt-configuration-configuring-remote-syslog-from-routers-switches-network-devices#dd-wrt



I'm asking specifically:
- about Kiwi Syslog Server, not about Papertrail;
- about TCP 6514, not UDP 514.
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14217
Location: Texas, USA

PostPosted: Wed Jun 30, 2021 5:00    Post subject: Reply with quote
This applies to both:
SolarWinds wrote:
Configure Syslog on Boot

To configure syslog to use a port other than 514, create a startup script via the router’s telnet/SSH connection and enter the following set of commands:
Code:
$ killall syslogd
$ /sbin/syslogd -l <SEVERITY> -L -R <LOG DESTINATION IP ADDRESS>:XXXXX

Check the Papertrail account's log destinations to see which hostname has been assigned, then replace XXXXX with the port, and <LOG DESTINATION IP ADDRESS> with the hostname’s IP address from nslookup.

DD-WRT firmware versions other than "micro" can also send security events. To enable security events, visit the "Security" tab, scroll to "Log Management," and enable desired options.

DD-WRT Wiki wrote:
Remote logging with Papertrail

Papertrail provides hosted log management, live in minutes. It's free of charge (if you do not need more than 100MB a month). Setup is easy with a just few of clicks. You can access and see your logs from anywhere in the world by visiting Papertrail web page.

Once you have a Papertrail account, the easiest way to setup the website logging in DD-WRT is to use the unique hostname and port that Papertrail provides to you for your account, and paste it into the Remote Server field.

  1. Go to the Settings tab in Papertrail
  2. Click Log Destinations tab
  3. Copy the url and port number provided (i.e. logs2.papertrailapp.com:xxxxx)
  4. Go to the Services tab in DD-WRT
  5. Enable Syslog on the Services tab
  6. Paste the url from step 3 into the Remote Server field for Syslog
  7. Apply changes, and your router will begin sending logs to the Papertrail website


_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
The__Doctor
DD-WRT Novice


Joined: 29 Jun 2021
Posts: 4

PostPosted: Wed Jun 30, 2021 6:18    Post subject: Reply with quote
difference between TCP 6514 and UDP 514

https://www.google.com/search?q=difference+between+TCP+6514+and+UDP+514
feliciano
DD-WRT Guru


Joined: 24 Oct 2008
Posts: 1079
Location: Latin America

PostPosted: Sat Jul 03, 2021 17:01    Post subject: Reply with quote
The__Doctor wrote:
I'm asking specifically:
- about Kiwi Syslog Server, not about Papertrail;
- about TCP 6514, not UDP 514.

The__Doctor wrote:
difference between TCP 6514 and UDP 514

https://www.google.com/search?q=difference+between+TCP+6514+and+UDP+514

The port number is irrelevant (besides writing IP_xyz:6514 instead of IP_xyz). What is relevant is TCP vs UDP: The standard implementation on dd-wrt and others is to log over UDP (i.e. connection-less). To use TCP, the syslogd or klogd has to set-up a connection to the server before sending any other data. Moreover if your want to use TLS on top of that.

(And as kernel-panic69 already told you, kiwi and papertrail are similar from dd-wrt point of view).

To better understand the scenario I suggest you to read about TCP, UDP, TLS, and syslog, klog.

_________________
If you want support, please read first the announcements and forum rules.
Si usted desea ayuda, por favor lea primero los anuncios y las reglas del foro.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum