logging receive

To enable the appliance to act as an rsyslog server, use the logging receive command in configuration mode. When enabled, the appliance listens for remote syslog messages from other hosts. Messages are sent to /var/log/messages.

Syntax

logging receive protocol {udp| tcp | tls} [port port_number]

no logging receive protocol {udp | tcp | tls}

no logging receive protocol {udp | tcp | tls} port

logging receive ssl cipher-list {original | fips | cc-ndcpp | fips-and-cc-ndcpp | fips-high-security | cc-ndcpp-high-security | fips-and-cc-ndcpp-high-security | compatible}

no logging receive ssl cipher-list

logging receive ssl min-version {tls1 | tls1.1 | tls1.2}

no logging receive ssl min-version

Parameters

protocol {udp \| tcp \| tls}	Enables receiving by the specified protocol: udp—Specifies rsyslog over UDP. tcp—Specifies rsyslog over TCP. tls—Specifies rsyslog over TLS.
portport_number	Sets the receiving port of the rsyslog server.
no logging receive protocol {udp \| tcp \| tls}	Disables receiving by this protocol.
no logging receive protocol {udp \| tcp \| tls} port	Resets the port for this protocol to its default.
ssl cipher-list {original \| fips \| cc-ndcpp \| fips-and-cc-ndcpp \| fips-high-security \| cc-ndcpp-high-security \| fips-and-cc-ndcpp-high-security \|compatible}	Configures the receive syslog cipher list for SSL/TLS: original—Original cipher list (maximum compatibility) fips—Compliant with FIPS cc-ndcpp—Compliant with CC-NDPP fips-and-cc-ndcpp—Compliant with both FIPS and CC-NDPP fips-high-security—Compliant with FIPS and excludes low-security ciphers cc-ndcpp-high-security—Compliant with CC-NDPP and excludes low-security ciphers fips-and-cc-ndcpp-high-security—Compliant with both FIPS and CC-NDPP and excludes low-security ciphers compatible—Improved security while maintaining backward compatibility
no logging receive ssl cipher-list	Resets the receive syslog cipher list to its default (compatibility).
ssl min-version{tls1 \| tls1.1 \| tls1.2}	Configures the minimum SSL version for notifications: tls1—Requires TLSv1 or higher. tls1.1—Requires TLSv1.1 or higher. tls1.2—Requires TLSv1.2 or higher.
no logging receive ssl min-version	Resets the receive syslog SSL minimum protocol version to the factory default (TLSv1.2).

Example

The following example enables the receiving of encrypted syslog messages using UDP:

hostname (config) # logging receive protocol udp

User role

Admin

Supported appliances

Command introduced before Release 7.6.0. Parameters added in Release 7.6.0.