Visit Jeremy's Blog.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 03-19-2017, 03:52 PM   #1
LQ Newbie
Registered: Jun 2013
Posts: 4

Rep: Reputation: Disabled
syslog over tls to multiple siem's

hey all,

I have a few machines delivering syslog over 514 to multiple siem's, however I want to get them to do that over tls (6514).

My syslog.conf has the lines:

$DefaultNetstreamDriverCAFile /opt/Kerberos/keystore/SSL.crt
$DefaultNetstreamDriver gtls
$ActionSendStreamDriverMode 1
$ActionSendStreamDriverAuthMode anon

and was wondering if I can add another line in there so that if one cert doesn't work to try another, or to list each cert to a specific siem (no clue how to do either).

Not sure if this belongs in the security forum, however thought it might be the best place to start.

Anyone have any ideas or if this can even be accomplished other than using the same keys on both siems? My boss might frown on that

Thanks for any help!


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Help for launching a SIEM. hack3rcon Linux - Security 7 08-11-2015 10:15 AM
Linux SIEM (Logging/Correlating/Monitoring) scucci Linux - Security 3 09-30-2010 02:51 PM
Syslog-ng using TLS, require help Lantzvillian Linux - Server 0 07-01-2009 12:54 PM
LXer: How To Enable Multiple HTTPS Sites For One IP On Debian Etch Using TLS Extensio LXer Syndicated Linux News 0 11-19-2007 04:20 PM
syslog to multiple servers rei Linux - Security 1 08-03-2006 03:55 AM

All times are GMT -5. The time now is 09:48 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration