Extreme Networks

ChristianK · ‎12-23-2024

We have an active Syslog configuration.

Now the IP of the Syslog receiver will be changed.

At which point is the IP configuration of the Syslog done?

Robert_Haynes · ‎12-24-2024

Mr. Pala is correct. You can forward syslog from SE to a third-party via Alarm actions, Control Notification rules and by making custom changes to the rsyslog configuration under-the-hood on SE itself. Those would be the three places you would have to look at.

Alarms & Events -> Alarm Configuration -> sort by Action -> look for any that are tied to syslog actions

Control -> Access Control -> Configuration -> Notifications -> look for any that are tied to syslog actions

/etc/rsyslog.conf under-the-hood via SSH

View solution in original post

Robert_Haynes · ‎12-23-2024

Hello. I do not quite exactly understand your question as worded.

XIQ-SE is a syslog receiver. Devices would point to the IP address of XIQ-SE to send XIQ-SE syslog related messages.

XIQ-SE has a feature/function to attempt to register itself as this syslog receiver / endpoint. Administration -> Options -> Syslog. For supported devices XIQ-SE will try to configure itself as a syslog receiver. It can also be configured to periodically check the syslog receiver configuration every 12 hours (by default) if enabled.

Extreme Networks

XIQ-SE Syslog configuration

XIQ-SE Syslog configuration