cancel
Showing results for 
Search instead for 
Did you mean: 
adriatikb
Level 7

send syslog mesages to syslog server,

hello,

i have configured rsyslogfile with line above and i can not get authenticvation errors on syslog serser

auth.* @192.168.34.102:514

when i chante to *.* @192.168.34.102:514 i can receive only info system logs.

how to fix this?

thanks

0 Kudos
3 Replies
McAfee Employee

Re: send syslog mesages to syslog server,

Hi Adriatikb,

I dont quite understand your goal here. Could you clarify your intentions?

Configuring "*.* @192.168.34.102:514" alone will not force MWG to start sending its log data to the syslog server.

You need to configure MWG to send events to the syslog server, there are plenty of discussions on this topic on the community:

https://community.mcafee.com/message/244540#244540

I like this one in particular.

Best,

Jon

0 Kudos
adriatikb
Level 7

Re: send syslog mesages to syslog server,

Thank you Jon for Ansewering ,

i have seen this before , what i want is to have only authentication to Gui of Mcafee

accessl log of webgateway  we have webreporter.

i want to manage access to web console of mcaffee , access with root or any other access, some security events and logs like are managed on linux and send them in syslog server.

but when i configure *.* @192.168.34.102:514 i get only *.info mesaged even i triger some login faild atept to ssh or web Gui

regards

adriatik

0 Kudos
McAfee Employee

Re: send syslog mesages to syslog server,

Hi again Adriatik,

This is information that goes into the audit log. MWG does not have a good way to pipe audit log data to a syslog server.

See:

https://community.mcafee.com/message/261146#261146

https://community.mcafee.com/message/276209#276209

Best,

Jon

0 Kudos