LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-19-2017, 03:52 PM   #1
sunriver61
LQ Newbie
 
Registered: Jun 2013
Posts: 4

Rep: Reputation: Disabled
syslog over tls to multiple siem's


hey all,

I have a few machines delivering syslog over 514 to multiple siem's, however I want to get them to do that over tls (6514).

My syslog.conf has the lines:

$DefaultNetstreamDriverCAFile /opt/Kerberos/keystore/SSL.crt
$DefaultNetstreamDriver gtls
$ActionSendStreamDriverMode 1
$ActionSendStreamDriverAuthMode anon


and was wondering if I can add another line in there so that if one cert doesn't work to try another, or to list each cert to a specific siem (no clue how to do either).

Not sure if this belongs in the security forum, however thought it might be the best place to start.

Anyone have any ideas or if this can even be accomplished other than using the same keys on both siems? My boss might frown on that

Thanks for any help!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Help for launching a SIEM. hack3rcon Linux - Security 7 08-11-2015 10:15 AM
Linux SIEM (Logging/Correlating/Monitoring) scucci Linux - Security 3 09-30-2010 02:51 PM
Syslog-ng using TLS, require help Lantzvillian Linux - Server 0 07-01-2009 12:54 PM
LXer: How To Enable Multiple HTTPS Sites For One IP On Debian Etch Using TLS Extensio LXer Syndicated Linux News 0 11-19-2007 04:20 PM
syslog to multiple servers rei Linux - Security 1 08-03-2006 03:55 AM


All times are GMT -5. The time now is 09:48 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration