How to Set Up Syslog to Capture Logs Real Time on a Central Location

How to Set Up Syslog to Capture Logs Real Time on a Central Location

book

Article ID: CTX119496

calendar_today

Updated On:

Description

This article describes how set up a Syslog server when you are experiencing issues across multiple XenServers and need to capture logs real-time on a central location.


Instructions

Note:  XenServer 6.2 will display logs locally even when enabling remote logging.

The following are the requirements:

  • Windows XP/2003 Server System (Installation of the Syslog Daemon)

  • Windows System with XenCenter installed and access to XenServer Properties

Complete the following procedures:

  1. Install Syslog Daemon

  2. Configure XenServers

  3. Retrieve Syslog Daemon Logs

 Install Syslog Daemon 

  1. Download and install the Kiwi syslogd server for log collection at the following site  https://www.kiwisyslog.com/kiwi-syslog-server and accept all the defaults.

  2. Disable any firewall or port blocking on the Windows computer on which the syslog server is installed.

  3. Start the syslog daemon by selecting Start/AllPrograms/KiwiEnterprises/KiwiSyslogDaemon/ KiwiSyslogDaemon.

  4. Syslog Daemon Started and Running:

    User-added image

Configure XenServers

  1. Each XenServer needs to be configured to send logs to the Syslog Daemon.

  2. Open XenCenter and right-click on the XenServer you want to configure to send logs to Syslog Daemon and select Properties.

  3. Click the Log Destination tab and set the following settings.

  4. Select the Remote selection.

  5. Enter the IP address of the Syslog Daemon Server.

  6. Select OK

    User-added image

  7. If server is set up and logs are being directed to the syslog server, you can see activity on the Syslog Daemon server as follows:

     (Syslog Daemon Receiving Logs)

    User-added image

  8. Repeat the preceding steps for all remaining XenServers.

  9. Make note of the date and hostname where logs are originating.

  10. Retrieve the logs as required.

Retrieve Syslog Daemon Logs

  1. To retrieve the logs from the Windows system you go to navigate to the C:\Program Files\Syslogd\Logs directory. 

    User-added image

  2. Copy the SyslogCatchAll.txt file and send it to Citrix Technical Support as needed.

Issue/Introduction

This article describes how set up a Syslog server when you are experiencing issues across multiple XenServers and need to capture logs real-time on a central location.