Hi Sinhaa,
I am trying to configure syslog.conf in a Linux server , which I have already configured in the WFA Administration->Syslog
The linux server has the syslogd and not the rsyslogd ( so we only have access to fixed syslog facilities )
The syslog.conf has a configuration that is similar to <FACILITY>.<SEVERITY> /var/log/file_name.log
So if we configure for example *.info /var/log/wfa.log we receive the syslogs from WFA
The problem is that a syslog server in production is usually shared with other applications and appliances.
So for example in a netapp filer, an authentication issue is configured as a LOCAL7 severity, then in syslog.conf, you configure local7.* /var/log/netapp_authentication .
The facilities as you can see are used to separate application or appliances in the same syslog server.
That is why I was asking the FACILITY WFA uses so we could try <WFA_FACILITY>.INFO /var/log/wfa.log
Thanks in advance!
Luciano.