Observability

Setting up Remote_Syslog2 on Solarwinds Observability

This article provides step-by-step instructions on setting up the remote_syslog2 for Solarwinds Observability

First published date

9/23/2024 5:05 PM

Last published date

4/23/2025 7:25 PM

Overview

Log messages for the Linux host entity can be sent to the SolarWinds Observability account via remote_syslog2 logging configuration.

Product section

SolarWinds Observability

Resolution

  1. Follow the provided instructions here for the manual installation. 
  2. For the configuration, modify the /etc/log_files.yml to look like the one below. The host should be syslog.collector.xx-yy.cloud.solarwinds.com, where xx-yy is determined by the URL you use to access SolarWinds Observability, described in Data centers and endpoint URIs. The token can be seen in the manual setup instructions within the "Add Data" wizard for Logs in the SWO UI.
files:
  - /path/to/your/file.log
destination:
  host: syslog.collector.xx-yy.cloud.solarwinds.com
  port: 6514
  protocol: tls
  token: 012345-XXX-XXXX-XXXX

      3.  Save changes made on the .(dot) yml file.
      4.  Rerun the remote syslog using the command: 

sudo remote_syslog

     5. Please make sure that you're running the latest version of remote_syslog2 by running this command:

remote_syslog --version

     6. Check and verify if the logs are coming in on your Logs UI of the SolarWinds Observability.