Syslog as a source

0

Hello, We are trying to convert from syslog-ng central syslog collection server to Opensearch, and want to build a syslog ingestion pipeline to send data directly to it from network devices and things that only have native syslog support. There is a perfect solution here, however, the instructions do not seem to add up: https://docs.aws.amazon.com/solutions/latest/centralized-logging-with-opensearch/syslog-as-log-source.html

For example, I do not see any these options in the Opensearch console. Prerequisites are met: Prerequisites Make sure you have imported an Amazon OpenSearch Service domain. For more information, see Domain operations.

Create a log analytics pipeline Sign in to the Centralized Logging with OpenSearch Console. In the left sidebar, under Log Analytics Pipelines, choose Application Log. Choose Create a pipeline. Choose Syslog Endpoint as Log Source, and choose Next. Select UDP or TCP with custom port number. Choose Next.

Is anyone able to reproduce these steps?

CW
asked 17 days ago55 views
1 Answer
0

I apologized as I was missing context of the large picture. The 'syslog as a source instructions' assume one has created a "Centralized Logging" stack in advance. https://docs.aws.amazon.com/solutions/latest/centralized-logging-with-opensearch/getting-started.html.

CW
answered 16 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions