Configuring the Syslog Server for Remote Backup

Constraints

• After remote backup is enabled, the system backs up the system data of the previous day at 00:00 every day by default.
• Logs are automatically backed up on a daily basis and uploaded to the corresponding folder on the Syslog server.
• Supported logs: System login logs, resource login logs, command operation logs, file operation logs, and two-person authorization logs

Prerequisites

You have the management permissions for the System module.

Procedure

1. Log in to your bastion host.
2. Choose System > Data Maintain > Log Backup.
3. In the Backup to the syslog server area, click Edit. In the displayed dialog box, complete required parameters.

   Table 1 Parameters for configuring the Syslog server

   Parameter	Description
   Status	Whether to back up data to the Syslog server (default: ). : This function is enabled. The system automatically starts backup at 00:00 every day. : This function is disabled.
   Sender Identifier	Identifier for connecting your bastion host to the Syslog server. The identifier is used to identify the bastion host from which the logs are received on the Syslog server.
   Server IP	IP address of the Syslog server.
   Port	Port number of the Syslog server.
   Protocol	Protocol of the Syslog server. The options are TCP or UDP. If TCP is selected, click Test connectivity to check whether the server is reachable.
   Backup Content	Select at least one type of logs to be backed up. System logon log Resource logon log Command operation log File operation log Two-person authorization log

4. Click OK. You can then view the backup information on the Log Backup tab.

   After the configuration is complete, the system backs up the data of the previous day at 00:00 every day and uploads the data to the remote Syslog server.

Follow-up Operations

• To disable the Syslog server backup, click Edit. In the displayed dialog box, set Status to Disabled.
• To view or download logs backed up to the Syslog server, log in to the Syslog server.