Syslog using OpenTelemetry

This tutorial demonstrates how to use custom syslog to send your logs to Coralogix using OpenTelemetry.

Overview

Syslog is a standard for message logging. It allows separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. Each message is labeled with a facility code, indicating the type of system generating the message, and is assigned a severity level.

When there is no support for custom syslog, an intermediate server is required in order to send the data to the Coralogix account.

Prerequisites

Server to install OpenTelemetry
Static public IP allocated to the server for initial configuration

Deployment

STEP 1. Install OpenTelemetry on your server.

STEP 2. Create a configure file.

receivers:
  syslog:
    tcp:
      listen_address: "0.0.0.0:514"
    protocol: rfc5424
    operators:
      - type: syslog_parser
        protocol: <**message_format>**
        parse_from: body
        parse_to: body
            - type: remove
        field: attributes
exporters:
  coralogix:
    domain: "<coralogix_domain>"
    private_key: "private_key"
    application_name: "applicationName"
    subsystem_name: "subsystemName"
    timeout: 30s
service:
  pipelines:
    logs:
      receivers: [ syslog ]
      exporters: [ coralogix ]

Replace the following values.

Value	Description
applicationName	Application name to be displayed in your Coralogix dashboard
subsystemName	Subsystem name to be displayed in your Coralogix dashboard
coralogix_domain	Your Coralogix domain
private_key	Your Coralogix Send-Your-Data API key
message_format	The syslog message format ( rfc3164/rfc5424 )

Notes:

port 514 is the default port for Syslog.
To change to this port, modify the OpenTelemetry configuration should be changed accordingly.

STEP 3. Save the configure file.

Additional Resources


Documentation	Syslog

Support

Need help?

Our world-class customer success team is available 24/7 to walk you through your setup and answer any questions that may come up.

Feel free to reach out to us via our in-app chat or by sending us an email at [email protected].

Syslog

Next Custom Syslog