Define general syslog settings

You can adjust general log forwarding settings by editing the LogServerConfiguration.txt. Adjusting these settings is optional.

1. Stop the Log Server:
   • If you run the Log Server as a service in Windows, you can stop it in the Windows Control Panel’s Services list.
   • In Linux, run the script <installation directory>/bin/sgStopLogSrv.sh.
2. Create a text file on the Log Server that lists the fields to forward in the correct order.
   See Knowledge Base article 10010 for more information.

   Tip: The <installation directory>/data/fields/syslog_templates/ directory contains example configuration files.
3. Change the parameters in LogServerConfiguration.txt.

   The file is located in <installation directory>/data/.

   Table 1. Log Server configuration

   Parameter	Value	Description
   SYSLOG_CONF_FILE	<File name>	Path to the file you created in Step 2, which defines the fields that are forwarded and their order.
   SYSLOG_MESSAGE_PRIORITY	0–191 a	The priority of the syslog message is included at the beginning of each UDP packet (the default is 6). a) As defined in RFC 3164 (https://⁠www.ietf.org/rfc.html).
   SYSLOG_USE_DELIMITER	ALWAYS_EXCEPT_NULL NEVER ALWAYS	Defines whether to use double quotes (“) in syslog messages to delimit the field values. The default setting “ALWAYS_EXCEPT_NULL” uses double quotes only for non-empty fields. “NEVER” does not use delimiters. “ALWAYS” uses double quotes as delimiters for all empty and non-empty field values.

4. Save the file and restart the Log Server.