Updated on 2026-07-30 GMT+08:00

Remotely Backing Up Logs to a Syslog Server

Scenarios

To enhance data disaster recovery management and improve audit data security and system scalability, you can back up configuration logs on a remote Syslog server.

If you enable remote backup to a Syslog server, the system backs up logs in real time, generates log files, and uploads the backup files to the Syslog server.

Types of Logs That Can Be Backed Up

Table 1 lists the types of logs that can be backed up to a Syslog server.

**Table 1** Types of logs that can be backed up
Log Type	Log Description
System login log	All login or logout records of the current instance. Operations are recorded as text.
System operation log	This type of log records all operations a user performs on the bastion host console after logging in to the bastion host instance. These operations include, but are not limited to, adding, deleting, or modifying resource accounts or users, as well as logging in to the system. Operations are recorded as text.
Resource login log	Records of logging in to or logging out of resources managed by the current instance. Operations are recorded as text.
Command operation log	Records of all commands executed on the logged-in instance. Operations are recorded as text.
File operation log	Records of file operations, such as upload and download, on the logged-in instance. Operations are recorded as text.
Two-person authorization log	Records of all two-person authorization operations in the logged-in instance. Operations are recorded as text.

Prerequisites

The role you belong to has the management permission for the System module. For details about how to check the permissions of each role, see Role.
You need to prepare a Syslog server.

Enabling Auto Backup to a Syslog Server

If you enable remote backup to a Syslog server, the system backs up logs in real time, generates log files, and uploads the backup files to the Syslog server.

Log in to your bastion host system.
In the navigation pane on the left, choose System > Data Maintain > Log Backup to go to the log backup management page.

On the right of the Backup to the syslog server area, click Edit. In the displayed dialog box, complete required parameters.

**Table 2** Parameters for configuring the Syslog server
Parameter	Description
Status	Whether to back up data to the Syslog server. This function is disabled by default. : Backing up logs to a Syslog server is enabled. After this function is enabled, the system automatically backs data up in real time every day. : Backing up logs to a Syslog server is disabled.
Sender Identifier	Identifier for connecting your bastion host to the Syslog server. The identifier is used to identify the bastion host from which the logs are received on the Syslog server.
Server IP	The IP address of the Syslog server.
Port	The port used by the Syslog server.
Protocol	The protocol used by the Syslog server. The options are TCP or UDP. If TCP is selected, click Test connectivity to check whether the server is reachable.
Backup Content	Type of logs to be backed up. Select at least one type. For details about supported types, see Types of Logs That Can Be Backed Up.

Click OK. You can then view the backup information on the Log Backup tab.

Follow-up Operations

To disable Syslog server backup, click Edit. In the displayed dialog box, set Status to Disabled.
To view or download logs backed up to the Syslog server, log in to the Syslog server.

Parent topic: Log Backup