topic Re: WFA syslog.conf facility configuration in Active IQ Unified Manager Discussions

WFA syslog.conf facility configuration

trentino123 — Thu, 05 Jun 2025 05:22:45 GMT

Hi all,

Have configured WFA syslog with INFO level.

In syslog.conf, was able to see very detailed messaged comming in with a tail -f ( login, all the commands executed in a workflow, etc ) using *.info .

The * is the facility.

As we are not using rsyslog but the old syslog, does anyone know the facility WFA uses?

Thanks in advance.

Re: WFA syslog.conf facility configuration

sharaf — Fri, 12 Dec 2014 12:24:03 GMT

Here in WFA we have tested with “Kiwi Syslog server”.

Re: WFA syslog.conf facility configuration

trentino123 — Fri, 12 Dec 2014 12:43:47 GMT

Hi Sharaf,

Was the kiwi syslog shared with other applications?

Looking for the facility as we don't have rsyslog, but the old syslog with fixed facilities.

Thanks in advance.

Re: WFA syslog.conf facility configuration

sharaf — Fri, 12 Dec 2014 16:37:26 GMT

Kiwi Syslog was not shared with other applications.

Regards

Sharaf

Re: WFA syslog.conf facility configuration

trentino123 — Fri, 12 Dec 2014 20:51:14 GMT

I am starting to believe that this will work only with rsyslog for non-standalone syslogs.

Standalone syslog is not an option in production.

Thx!

Re: WFA syslog.conf facility configuration

sinhaa — Sun, 14 Dec 2014 03:54:02 GMT

Honestly, I'm still not able to understand your problem.

What exactly are you trying to achieve and what issues are you facing?

If you can elaborate, it will help me try to solve it.

sinhaa

Re: WFA syslog.conf facility configuration

trentino123 — Mon, 15 Dec 2014 13:48:02 GMT

Hi Sinhaa,

I am trying to configure syslog.conf in a Linux server , which I have already configured in the WFA Administration->Syslog

The linux server has the syslogd and not the rsyslogd ( so we only have access to fixed syslog facilities )

The syslog.conf has a configuration that is similar to <FACILITY>.<SEVERITY> /var/log/file_name.log

So if we configure for example *.info /var/log/wfa.log we receive the syslogs from WFA

The problem is that a syslog server in production is usually shared with other applications and appliances.

So for example in a netapp filer, an authentication issue is configured as a LOCAL7 severity, then in syslog.conf, you configure local7.* /var/log/netapp_authentication .

The facilities as you can see are used to separate application or appliances in the same syslog server.

That is why I was asking the FACILITY WFA uses so we could try <WFA_FACILITY>.INFO /var/log/wfa.log

Thanks in advance!

Luciano.

Re: WFA syslog.conf facility configuration

sinhaa — Wed, 17 Dec 2014 02:58:44 GMT

Hi Luciano,

I'll get back to you on this. Im not sure I have the right answers at the monent.

warm regards,

Abhishek Sinha

Re: WFA syslog.conf facility configuration

trentino123 — Wed, 17 Dec 2014 13:23:26 GMT

Thanks Sinha, will await for your response. Thanks in advance.