Syslog (Data Ingestion)

Syslog (Data Ingestion)

Automation Guide for Bloo

1. Overview

Syslog Connector can receive logs from various devices and log sources via UDP connection on port 514 of the Adapter.

2. How to Ingest Data without any Configuration?

Syslog Connector will be automatically added (no configurations required) while onboarding the Adapter.

Follow the steps below to ingest data into Bloo without any configurations.

Info: The steps below (using apt-get) apply to Debian/Ubuntu-based systems specifically. If you're on a different Linux distribution, such as RHEL or CentOS, use your system's own package manager (for example, yum or dnf) instead.

• Ensure that all the components are up and running.
• Ensure that port 514 UDP is open and is not occupied by some other services to enable forwarding of log events.
• Log in to the server as the root user.
• Install the syslog package, if you haven't installed it:

apt-get install rsyslogCopy

• Edit the rsyslog configuration with vim /etc/rsyslog.d/50-default.conf and paste the following line below:

*.* @Bloo-Adapter-IP:514Copy

• Save the syslog configuration file.
• Restart the rsyslog service:

/etc/init.d/rsyslog restart
# or, on modern systemd-based systems:
systemctl restart rsyslogCopy

The logs will be automatically ingested into Bloo on performing the above steps.