Configuring Syslog

Syslog forwards system logs from the Veeam Software Appliance and Veeam Infrastructure Appliances to a remote syslog server. You can configure Syslog in the Veeam Backup & Replication web UI.

This forwards operating system and appliance service logs only. To forward Veeam Backup & Replication job success and failure notifications, configure event forwarding to a syslog server instead.

Veeam Backup & Replication then distributes the settings to all Veeam Appliances in your backup infrastructure.

You can forward logs to the syslog server that Veeam Backup & Replication already uses for event forwarding. You can also specify a separate server. Syslog uses the same transport protocols as Veeam Backup & Replication event forwarding.

Enabling Syslog Event Forwarding

To enable Syslog event forwarding:

1. Click Configuration in the top bar.
2. In the management pane, click Observability > Syslog.
3. Set the Enable event forwarding toggle to On.
4. Then, do one of the following:

• To use a syslog server that is already used for Veeam Backup & Replication event forwarding, set the Use settings of syslog server configured on backup server (if any) toggle to On.

• To configure a new syslog server:

1. Specify the server that you want to forward logs to. You can use IPv4, IPv6, or the DNS name of the server.

2. Specify the port for forwarding the logs.
3. Select a transport protocol.

5. In the Forwarding Rules section, select an event severity level. Only events with this severity or higher are forwarded.

6. Click Save.

Configuring Advanced Filtering

After you enable Syslog event forwarding, you can stop specific programs and services from sending events to the syslog server. You can exclude a program completely, or forward only events of certain severity levels.

Adding Advanced Filter

To add a new event filtering rule, do the following:

1. Click Configuration in the top bar.
2. In the management pane, click Observability > Syslog.
3. In the Forwarding Rules section, click Set Advanced Filters.
4. Click Add.
5. Specify an application name.

6. Select the event severity levels you do not want to forward.
7. Click OK.

List of Application Names

Editing Advanced Filter

To edit an existing event filtering rule, do the following:

1. Click Configuration in the top bar.
2. In the management pane, click Observability > Syslog.
3. In the Forwarding Rules section, click Set Advanced Filters.
4. Select an event filtering rule.
5. Click Edit.
6. Make any necessary changes to the application name and filtered severity levels.

7. Click OK.

Removing Advanced Filter

To remove an existing event filtering rule, do the following:

1. Click Configuration in the top bar.
2. In the management pane, click Observability > Syslog.
3. In the Forwarding Rules section, click Set Advanced Filters.
4. Select an event filtering rule.
5. Click Remove.

Importing and Exporting Advanced Filters

You can export and import filtering configurations to reuse them across multiple Veeam Backup & Replication servers.

To export a filtering configuration, do the following:

1. Click Configuration in the top bar.
2. In the management pane, click Observability > Syslog.
3. In the Forwarding Rules section, click Set Advanced Filters.
4. Open the Manage drop-down menu and select Export.

To import a filtering configuration, do the following:

1. Click Configuration in the top bar.
2. In the management pane, click Observability > Syslog.
3. In the Forwarding Rules section, click Set Advanced Filters.
4. Open the Manage drop-down menu and select Import.
5. Select an exported filtering configuration .xml file.