ASUSTOR - Website Management

Date:

Topic_id:

Subject:

Description:

content:

<h4>COURSE OBJECTIVES</h4>
Upon completion of this course you should be able to:
<ol>
<li>Use your NAS as a Syslog server to centrally collect and manage all logs from syslog-compliant network devices.</li>
</ol>
 
<h4>PREREQUISITES</h4>
Course Prerequisites: N/A Students are expected to have a working knowledge of: N/A 
 
<h4>OUTLINE</h4>
<a href="#sl1">1. Configurazione del server Syslog</a>
<a href="#sl2">2. syslog client configuration</a>
<a href="#sl3">3. syslog server management</a>
<a href="#sl31">3.1 Overview</a>
<a href="#sl32">3.2 Log</a>
<a href="#sl33">3.3 Archive</a>
<a href="#sl34">3.4 Notification</a>
 <hr /> 
<h4><a name="sl1"></a>1. Configurazione del server Syslog</h4>
In the following example, we will configure the ASUSTOR NAS Syslog server.
 
STEP 1
<ul>
<li>Before you start, log into ADM from a web browser, then search for and install [Syslog Server] from [App Central].</li>
</ul>
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714111737_Appcentral_install_syslog.png" alt="" title="" width="880" height="510" />
 
STEP 2
<ul>
<li>Once the installation is complete, click the [Syslog Server] icon in ADM to access it.</li>
</ul>
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714111754_ADM_desktop_syslog.png" alt="" title="" width="900" height="506" />
 
STEP 3
<ul>
<li>Select [Settings] from the left panel, check [Enable Syslog Server] and choose [Enable TCP] or [Enable UDP], then click [Apply].</li>
</ul>
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714111833_Syslog_settings_enable_server.png" alt="" title="" width="880" height="526" />
 
 Note:
<ol>
<li>All syslog-compatible clients can send logs via UDP, but not all syslog clients support TCP transmission. Therefore, after specifying the receiving protocol (TCP/UDP) on Syslog Server, make sure that all syslog clients can use the same protocol to send logs.</li>
<li>The default port number for the Syslog protocol is 514. If you change the port number on Syslog Server, use the same port on the client side.</li>
<li>ASUSTOR Syslog Server supports encrypted TCP transmission over SSL. If you enable SSL for TCP reception on Syslog Server, click the [Export] button below to save the SSL certificate on your local computer and import it to all Syslog clients.</li>
<li>If there are multiple Syslog Servers on the same local network, do not configure them in a loop. For example, devices A, B, C support Syslog Server and Syslog Client simultaneously. If the syslog route is defined as AčBčCčA , it is a loop. Messages will be repeatedly sent in a loop, which may cause the entire LAN to fail.</li>
</ol>
 
STEP 4
<ul>
<li>Go to the [Filter] tab and click the [Add] button to create filters. Syslog Server will only receive and save logs that meet the specified criteria.</li>
</ul>
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714111917_Syslog_settings_filter_add.png" alt="" title="" width="880" height="526" />
 
<ul>
<li>Subject: The following parameters are provided in accordance with RFC 3164:</li>
</ul>
<table class="table table-striped" border="1" style="width: 70%; border: solid #e0e8f1;">
<tbody>
<tr>
<th style="text-align: center; width: 24%;">Value</th>
<th style="text-align: center;">Description</th>
</tr>
<tr>
<td style="text-align: center;">auth</td>
<td style="text-align: center;">authorization messages</td>
</tr>
<tr>
<td style="text-align: center;">authpriv</td>
<td style="text-align: center;">Non-system authorization messages</td>
</tr>
<tr>
<td style="text-align: center;">cron</td>
<td style="text-align: center;">planning demon</td>
</tr>
<tr>
<td style="text-align: center;">daemon</td>
<td style="text-align: center;">systemic demons</td>
</tr>
<tr>
<td style="text-align: center;">ftp</td>
<td style="text-align: center;">demon FTP</td>
</tr>
<tr>
<td style="text-align: center;">kern</td>
<td style="text-align: center;">kernel news</td>
</tr>
<tr>
<td style="text-align: center;">lpr</td>
<td style="text-align: center;">line printer subsystem</td>
</tr>
<tr>
<td style="text-align: center;">mail</td>
<td style="text-align: center;">postal system</td>
</tr>
<tr>
<td style="text-align: center;">news</td>
<td style="text-align: center;">network messaging subsystem</td>
</tr>
<tr>
<td style="text-align: center;">security</td>
<td style="text-align: center;">safety news</td>
</tr>
<tr>
<td style="text-align: center;">syslog</td>
<td style="text-align: center;">messages generated internally by syslogd</td>
</tr>
<tr>
<td style="text-align: center;">user</td>
<td style="text-align: center;">user-level messages</td>
</tr>
<tr>
<td style="text-align: center;">uucp</td>
<td style="text-align: center;">UUCP subsystem</td>
</tr>
<tr>
<td style="text-align: center;">local0</td>
<td style="text-align: center;">local use 0 (local0)</td>
</tr>
<tr>
<td style="text-align: center;">local1</td>
<td style="text-align: center;">local use 1 (local1)</td>
</tr>
<tr>
<td style="text-align: center;">local2</td>
<td style="text-align: center;">local use 2 (local2)</td>
</tr>
<tr>
<td style="text-align: center;">local3</td>
<td style="text-align: center;">local use 3 (local3)</td>
</tr>
<tr>
<td style="text-align: center;">local4</td>
<td style="text-align: center;">local use 4 (local4)</td>
</tr>
<tr>
<td style="text-align: center;">local5</td>
<td style="text-align: center;">local use 5 (local5)</td>
</tr>
<tr>
<td style="text-align: center;">local6</td>
<td style="text-align: center;">local use 6 (local6)</td>
</tr>
<tr>
<td style="text-align: center;">local7</td>
<td style="text-align: center;">local use 7 (local7)</td>
</tr>
</tbody>
</table>
 
<ul>
<li>Relevance: the following parameters are provided in accordance with RFC 3164:</li>
</ul>
<table class="table table-striped" border="1" style="width: 70%; border: solid #e0e8f1;">
<tbody>
<tr>
<th style="text-align: center; width: 24%;">Value</th>
<th style="text-align: center;">Description</th>
</tr>
<tr>
<td style="text-align: center;">Emerg</td>
<td style="text-align: center;">The system is not usable</td>
</tr>
<tr>
<td style="text-align: center;">Alert</td>
<td style="text-align: center;">Action should be taken immediately</td>
</tr>
<tr>
<td style="text-align: center;">Crit</td>
<td style="text-align: center;">Critical conditions</td>
</tr>
<tr>
<td style="text-align: center;">Err</td>
<td style="text-align: center;">Error conditions</td>
</tr>
<tr>
<td style="text-align: center;">Warning</td>
<td style="text-align: center;">Warning conditions</td>
</tr>
<tr>
<td style="text-align: center;">Notice</td>
<td style="text-align: center;">Normal but significant condition</td>
</tr>
<tr>
<td style="text-align: center;">Info</td>
<td style="text-align: center;">News releases</td>
</tr>
<tr>
<td style="text-align: center;">Debug</td>
<td style="text-align: center;">Debugging messages</td>
</tr>
</tbody>
</table>
 
<h4><a name="sl2"></a>2. Syslog client configuration</h4>
In the following example, we will configure the ASUSTOR NAS as a syslog client. As for syslog client settings for other network devices, refer to their user manuals.
 
STEP 1
<ul>
<li>Click [System Information] in ADM, select the [Log] tab and click the [Syslog] button.</li>
</ul>
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714111944_sysinfo_log_syslog.png" alt="" title="" width="900" height="532" />
 
STEP 2
<ul>
<li>Select [Enable Syslog Client], and then enter the Syslog server's IP address, protocol type and port number. Select the type and level of log you want to send to the Syslog server, and then click [OK].</li>
</ul>
 Note: If there are multiple Syslog Servers on the same local network, do not configure them in a loop.
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714112012_sysinfo_log_connect_syslog_server.png" alt="" width="650" height="545" />
 
<h4><a name="sl3"></a>3. Syslog server management</h4>
<a name="sl31"></a>3.1 Overview
There are 3 types of graphical interfaces that allow managers to quickly view the number and distribution of logs.
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714112054_Syslog_server_overview.png" alt="" width="880" height="526" />
 
<a name="sl32"></a>3.2 Log
Here you can see all the logs received.
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714112114_Syslog_server_log.png" alt="" width="880" height="526" />
 
<ul>
<li>Export: Here you can select the export file format (HTML or CSV).</li>
<li>Latest log: Use this button to switch between recent and archived logs.</li>
<li>Clear: Use this button to clear all recent logs.</li>
<li>Advanced Search: Here you can define search conditions (keyword, device, level, object, period, program name) to display specific logs.</li>
</ul>
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714112128_Syslog_server_log_advance_search.png" alt="" title="" width="600" height="545" />
 
<a name="sl33"></a>3.3 Archive
<ul>
<li>Save in: Here you can define the folder where the archived logs will be saved.</li>
<li>Log name and format: here you can define naming rules for automatically archived logs.</li>
<li>Automatic archiving rules: Here you can define criteria (log size, log number, log time) for the system to automatically archive logs.</li>
</ul>
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714112159_Syslog_server_archive.png" alt="" title="" width="880" height="526" />
 
<a name="sl34"></a>3.4 Notification
Here you can define rules to receive email notifications when certain logs are received or when certain events occur.
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714112351_Syslog_server_notification.png" alt="" title="" width="880" height="526" />
 
Note: Before enabling this feature, go to [Settings] → [Notification] in ADM and first complete the email sender configurations in the [Send] tab.
<img src="https://www.asustor.com/images/tinymce/upload_img_20220714112406_ADM_Settings_notification.png" alt="" title="" width="880" height="527" />

Publish: