Heya,
We are trying to get our CAS 5.3 to forward its log, at least the audits,
to graylog via log4j2, right now i followed two instructions , One from CAS
Git Documentation (
https://github.com/apereo/cas/blob/5.3.x/docs/cas-server-documentation/installation/Logging-SysLog.md)
and one from :
(https://dacurry-tns.github.io/deploying-apereo-cas/building_server_configure-logging-settings.html)
Trying from CAS instruction on external syslog forwarding we have this
under Appenders:
<Appenders>
<Syslog name="SYSLOG" format="RFC5424" host="10.12.1.1"
port="8514"
protocol="TCP" appName="MyApp" includeMDC="true" mdcId="mdc"
facility="LOCAL0" enterpriseNumber="18060" newLine="true"
messageId="Audit" id="App"/>
</Appenders>
<Asynclogger name="org.apereo" additivity="true" level="debug">
<appender-ref ref="SYSLOG" />
</AsyncLogger>
Trying from dacurry-tns, we have added this part in log4j2.xml (with right
dns name)
<Socket name="graylog" host="graylog.<ourdns>" protocol="udp" port="60001">
<GelfLayout compressionType="GZIP" compressionThreshold="1024">
<KeyValuePair key="webappName" value="cas"/>
</GelfLayout>
</Socket>
<AsyncRoot level="warn">
<AppenderRef ref="graylog"/>
</AsyncRoot>
we can see on cas that it has established connection on with netstat
tcp6 1 0 10.5.78.101:36852 10.5.78.125:8514
ESTABLISHED 25647/java
doing a udp tcpdump on port 60001 on cas server also gives no packets
but doing a tcpdump on that port is not giving anything as being sent, The
inputs for both the tcp and UDP GELF is already set up in graylog and is
listening.
Any input would be highly appreciated!
--
CONFIDENTIALITY NOTE <https://laurentian.ca/confidentiality> - AVIS:
COURRIEL CONFIDENTIEL. You can view the confidentiality terms at
https://laurentian.ca/confidentiality
<https://laurentian.ca/confidentiality>. Notre avis de confidentialité est
disponible au site https://laurentienne.ca/avis
<https://laurentienne.ca/avis>
--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/61f7f541-25fa-448f-a91b-42b6d35fc47cn%40apereo.org.
