Trash Panda Guides

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Centralized Event Logging (Telemetry) ======

In a decoupled architecture, logging into five separate servers to parse application logs during an outage is highly inefficient. This section configures RSYSLOG on your Linux hosts to forward all system events over the network to the Synology NAS (The Vault) running LogCenter.

===== 1. The Receiver (Synology NAS) =====
Configure the NAS to listen for incoming syslog streams over the Trusted Management Network (VLAN 10).

  - Open the **Package Center** on your Synology NAS and install **Log Center**.
  - Open Log Center and navigate to **Log Receiving**.
  - Check the box for **Receive logs from other devices**.
  - Set the format to **BSD**.
  - Set the protocol to **UDP** and the port to **514**.
  - Click Apply.

===== 2. The Transmitters (Linux Compute Nodes) =====
Execute this configuration on **VM-A (Acquisition)**, **VM-B (Requests)**, **Physical Host 2 (Media Engine)**, and **Physical Host 4 (Edge Proxy)**.

  - Open the native RSYSLOG configuration file:
<code>sudo nano /etc/rsyslog.conf</code>

  - Scroll to the bottom of the file and append the UDP forwarding rule. Replace the IP address with the VLAN 10 management IP of your Synology NAS (e.g., `192.168.10.200`).
<file bash /etc/rsyslog.conf>
# Forward all system logs via UDP to Synology Log Center
*.* @192.168.10.200:514
</file>

  - Restart the RSYSLOG daemon to instantly begin transmission:
<code>sudo systemctl restart rsyslog</code>

===== 3. Firewall Verification =====
If logs are not appearing in the Synology Log Center, verify your [[network:omada_sdn|Switch ACLs]] and Gateway Firewalls. 
Specifically, the Edge Proxy on VLAN 20 will need explicit permission to send UDP Port 514 traffic to the NAS IP on VLAN 10.

**Next Step:** Implement enterprise backup policies in [[operations:veeam_dr|Veeam Disaster Recovery Orchestration]].