Documentation forSolarWinds Platform

Forward syslog messages (deprecated)

This SolarWinds Platform topic applies to the following products if you are NOT using the Orion Log Viewer to monitor syslogs.

DPAIM — NAM — NCM — NPM — NTA — SAM — SRM — VNQM

As of SolarWinds Platform 2022.3, Syslog Viewer is no longer available and the Syslog view was replaced by SolarWinds Platform Log Viewer. See View logs and events with the SolarWinds Platform Log Viewer.

The Syslog message forwarding action allows you to forward received syslog messages. Additionally, if you have WinPCap version 3.0 or later installed on your SolarWinds Platform server, you can forward syslog messages as spoofed network packets.

The following procedure assumes you are editing a Forward the Syslog Message alert action.

  1. Provide the hostname or IP address of the destination to which you want to forward the received syslog message.
  2. Provide the UDP Port you are using for Syslog messaging.

    The default is UDP port 514.

  3. Specify what IP address should be used for the source device in the syslog message. By default, the device IP is replaced by the SolarWinds Platform server IP address.
    1. To designate a specific IP address or hostname as the Syslog source, select Retain the Original Source Address of the Message, select Use a Fixed Source IP Address, and provide the IP address or hostname.
    2. To keep the original IP address of the syslog source device, select Retain the Original Source Address of the Message, select Spoof Network Packet, and select the Network Adapter.
  4. Click OK to complete the configuration.

You have defined the destination, port for sending the syslog message, and the source IP of the device in the syslog message used in the alert action.