Hello,
I've successfully configured a vCSA 5.5 to send syslogs to a remote syslog server including the SSO logs for authentication auditing. I followed William Lam's post about this on his virtuallyGhetto blog. I recently deployed the vCSA 6.0 in my lab and have noticed that the syslog facilities are entirely different in 6.0 vs. the syslog-ng config in 5.5. I followed his post about the native syslog feature in vCSA 6.0, but didn't find anything about sending custom logs:
A preview of native syslog support in VCSA 6.0 | virtuallyGhetto
So the big question is:
Does anyone know of a way to forward (send) syslogs like the SSO logs to a remote syslog server in vCSA 6.0?
Thanks!
Matt