Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

System Log Optional Configurations

Configure Syslog Ports

By default, Paragon Insights listens for system log (syslog) messages from all device groups on UDP port 514. You can change the system-level syslog port, as well as configure one or more ports per device group. The more specific device group setting takes precedence over the system level setting.

To change the system-level syslog port:

  1. Click Configuration > Data Ingest > Settings in the left navigation bar.
  2. Select the Syslog tab on the left side of the page.
  3. On the Syslog Settings page, edit the port number.
  4. Click Save & Deploy.

To configure a syslog port for a device group:

  1. Go to the Configuration > Device Group page and click on the name of a device group.

  2. Click the Edit (Pencil) icon.

  3. In the Edit Device Group window, click Advanced > Ports caret.

  4. Enter the port(s) in the Syslog Ports field.

  5. Click Save & Deploy.

Configure Syslog Time Zone

When a device exports structured syslog messages, time zone information is included within the message. However, unstructured syslog messages do not include time zone information. By default, Paragon Insights uses GMT as the time zone for a device. In these cases, you can assign a time zone to a device or device group within Paragon Insights.

To configure a device’s time zone at the device level:

  1. Go to the Configuration > Devices and click on the name of a device in the Device page.
  2. Click the Edit (Pencil) icon.

    The Edit Device-Name page appears.

  3. Click Advanced drop-down menu and enter a value in the Syslog Time Zone field in the format +/- hh:mm. For example, -05:00.

Configure Host Name Aliases for a Device

When a device has more than one host name, such as a device with dual REs, syslog messages can arrive at the Paragon Insights server with a host name that is not the device’s main host name. In these cases, you can add host name aliases for that device.

Note:

If you add a device in Paragon Insights using its IP address, you must also add the host name that will appear in the syslog messages.

To configure additional hostname aliases:

  1. Go to the Configuration > Device page and click on the name of a device.
  2. Click the Edit (Pencil) icon.

    The Edit Device-Name page appears.

  3. Click Device ID Details and enter the host name(s) in the Syslog Host Names field.

Related Documentation