Submit a ticketCall us

WebinarWebinar: A checklist for planning your Network Performance Monitor (NPM) upgrade

Are you ready for your next upgrade? To help you plan smoothly, join this webcast to learn more about, SolarWinds® Orion® Installer, SolarWinds Upgrade Advisor, Upgrades Guides, Training Videos, and other resources available. We’ll share key upgrade planning considerations, lessons learned from customers with practical advice from SolarWinds Product Experts. We’ll also give practical tips to identify the estimated time needed and resources, how to prepare the business and IT staff for changes, ways to plan for required system changes, and more.

Register now.

Home > Success Center > Orion Platform > Orion Documentation > Orion Platform Administrator Guide > Monitor Syslog messages

Monitor Syslog messages

Table of contents
Created by Caroline Juszczak, last modified by Magdalena.Markova on Nov 30, 2016

Views: 1,166 Votes: 1 Revisions: 6

This Orion Platform topic applies only to the following products:

ACMAPMDPAIMNAMNCMNOMNPMNTASAMSRMVNQM

Syslog messages are received by the SolarWinds Syslog Service, which listens for incoming messages on UDP port 514. Received messages are decoded and stored in the SolarWinds Orion database. The SolarWinds Syslog Service can handle large numbers of simultaneously incoming Syslog messages from all your monitored devices.

A SolarWinds installation can process approximately 1 million Syslog messages per hour, which is about 300 Syslog messages per second. You can process more by increasing your hardware requirements over the minimum requirements.

You can view Syslog messages in the Orion Web Console or in the Syslog Viewer application.

Before you begin

  • Confirm that your network devices are configured to send Syslog messages to the SolarWinds Orion server IP address. For proper configuration of network devices, refer to the documentation supplied by the device vendor.
  • Ensure UDP port 514 is open for IPv4 and IPv6.
  • The message must be formatted according to the Request for Comments (RFC) requirements.
  • If a long message is split into smaller parts, these parts should be formatted to not be skipped.

    SolarWinds recommends setting up Enable RFC Relay in the service to true to allow the service to restructure the message by adding the default facility, severity, or date.

Learn more:
Last modified

Tags

Classifications

Public