Adding Syslog Server

Veeam Data Cloud for Microsoft 365 allows you to define a syslog server where you can receive Veeam Data Cloud for Microsoft 365 user activity logs.

To add your syslog server, do the following:

1. On the Microsoft 365 page, click Manage next to the tenant you want to work with.
2. Select Settings.
3. Select the Access tab.
4. In the Logging section, click Add Syslog Server.

5. In Add Syslog Server, specify your syslog server address, port, protocol type, and whether you want to receive logs:

1. In the Server Address field, type the IP address of the syslog server.
2. In the Port field, type the port for the syslog server requests.
3. From the Protocol Type drop-down list, select the protocol [over which Veeam Data Cloud for Microsoft 365 will send logs] UDP or TCP.
4. To receive the logs, toggle the Send activity logs switch (enabled by default).
5. Click Save to apply the specified settings.

6. Click Save to add the syslog server.

Log Data Details

The log records you receive in your syslog server contain information about all Veeam Data Cloud for Microsoft 365 user activities.

The log record format is specified by the RFC3164 protocol and the data is presented in the following way:

• IP address
• Date Time
• Format
• Severity
• Type
• Message
• Action ID. For more information, see Log Record Action IDs.
• User:email
• Session Type
• Related Object
• Date Time
• Object Details

The following example shows a log record for the creation of a restore session: