Secure (with ssl) logging to syslog server

Need new test, action, option? Post request here.
Post Reply
menno
Posts: 158
Joined: Fri May 21, 2010 1:27 am

Secure (with ssl) logging to syslog server

Post by menno »

hello HM team.

something for the wish list.

Currently we are use HM to send all check data to a syslog server.
Under "action profiles" we send the data to a TCP 515 port on a splunk machine.
see here
Image

This works great !!!

But ...

Is there or will there be a possibility to send this data secure over the network (with a SSL connection) to our syslog splunk machine ?
As you understand its not allowed for big company's to send unsecured data over the network. ( SOX issue )
-> We need an option in HM : Send data to TCP/UDP port ... but then secure, with some (selfsigned) certificate ( pem file for example )

So we have an issue here.
All other data is secure but only the HM data not. Our customer uses servers that are directly on the internet and the RMA data is allready secure so thats not an issue. RMA data is OK ! :D

I hope you understand my question here.
Many thanks for all the great help so far !

Menno

UPDATE 11:45
We manage to write all logging locally and send the logs secure via Nxlog to our Splunk machine.
...so we are covered for now but the question remains.
thanks Menno
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Its possible to implement but will effect performance. If you are using Full or Reply logging mode and perform a lot of tests, its better to use local file logs.

I added task into "to do" list.

Regards
Alex
Post Reply