I need to verify what NetScaler is sending to SysLog. The syslog admin reports receiving incomplete logs. The syslog configuration seems to be fine and nothing has been changed. Any ideas?
Arthur
04/04/2024, 10:37 AM
Answer: capture traffic on ADC, than open in Wireshark and filter „Syslog”. Don’t forget about capturing master encryption keys.
👍 4
j
Jan Tytgat
04/04/2024, 6:35 PM
If results with syslog are incomplete, try switching from UDP to TCP if you haven’t.