1. SYSLOG Real-Time Monitoring of System i Events

2. What is SYSLOG? Multi server environments are now the reality at most sites; however the number of operators cannot and should not grow accordingly. Goal: one operator should control the multi server environment from a single console. The solution is SYSLOG. SYSLOG is a widely-used protocol for sending alert messages in real time to a central SYSLOG manager. See discussion at: http://en.wikipedia.org/wiki/Syslog http://en.wikipedia.org/wiki/Syslog Enables the operator to collect and observe high-priority messages from different systems (System i and others) using a central System Event Manager (SEM) product.

3. System Event Manager (SEM) Products System i PC LinuxUnixMF Note: iSecurity Anti-Virus Works with all Operating Systems Individual & Multiple System Management iSecurity SYSLOG And additional products (Free) SYSLOG at a Typical Site

4. SYSLOG in iSecurity SYSLOG is currently available in Firewall, Audit (Action), AP-Journal and Authority on Demand. Messages (alerts) are sent to the central SEM product in real time. Destination IP address must be specified. Message Facility and Message Severity can be defined. See: http://www.softpanorama.org/Logs/Syslog/syslog_messages_classification.shtml. http://www.softpanorama.org/Logs/Syslog/syslog_messages_classification.shtml The structure of the message is definable by each site and includes variables and constants (see following slide)

5. SYSLOG attributes are defined using Option 81  21 from the main menu. SYSLOG Definitions

6. Real-Time Alerts QAUDJRN (Audit) Network Security (Firewall) Critical OS messages (QSYSOPR/ QSYSMSG) Database Journals (AP Journal) Authority changes (Authority on Demand) Real-Time Alert handling in iSecurity Execute CL Scripts Send e-mailWrite to MSGQ Write to SYSLOG Send SMS * Action can do all of the following

7. SYSLOG messages written when special user authority was added (example). SYSLOG Messages in (free) Kiwi Syslog Daemon

8. Thank You! Visit us at www.razlee.com