This message was deleted.
# citrix-netscalers
Slackbot
10/04/2019, 6:04 PMThis message was deleted.
l
Leee Jeffries
10/04/2019, 6:34 PMYup. Have you setup audit actions?
b
BobFrankly
10/04/2019, 7:05 PM"Actions" links to servers
l
Leee Jeffries
10/04/2019, 7:06 PMLog actions link to policies.
b
BobFrankly
10/04/2019, 7:06 PMSystem / Auditing "Audit Syslog Actions" jumps me to servers 😕
l
Leee Jeffries
10/04/2019, 7:06 PMI can lab this up just using the newnslog for debug (built in NS syslog)
b
BobFrankly
10/04/2019, 7:07 PMbut I do have policies
l
Leee Jeffries
10/04/2019, 7:07 PMOkay, under policies in content switching , edit one and you'll see log action.
b
BobFrankly
10/04/2019, 7:08 PMyup, and I've got "Log Action" bound to an action
BobFrankly
10/04/2019, 7:09 PMand if I go to the CS vServer, that policy with the links is the one with the hits as well
l
Leee Jeffries
10/04/2019, 7:09 PMOkay cool. What logging level?
b
BobFrankly
10/04/2019, 7:09 PMtried "informational", "Notice", and it's currently on "Critical"
l
Leee Jeffries
10/04/2019, 7:11 PMOkay cool.
Leee Jeffries
10/04/2019, 7:13 PMUnder System, Syslog, there should be a policy for your server. You need to say in that policy which logging levels will be sent over.
b
BobFrankly
10/04/2019, 7:13 PMthey're all checked
l
Leee Jeffries
10/04/2019, 7:13 PMIn that case your down to wireshark to see if it's being sent
Leee Jeffries
10/04/2019, 7:14 PMIf not, you'll have to raise a ticket with Citrix. In my experience there is nothing else to check. Unless for some reason your syslog server is rejecting the info.
b
BobFrankly
10/04/2019, 7:14 PMWhen I linked the server globally, all sort of things were being sent
BobFrankly
10/04/2019, 7:14 PMbut not the DNS details I was after
BobFrankly
10/04/2019, 7:14 PMticket with Citrix it is then
l
Leee Jeffries
10/04/2019, 7:14 PMStrange. Defo, would live to know how you get on.
j
Julian Mooren
10/04/2019, 7:42 PMDid you create a DNS vServer and try to see for example the DNS Querys in the syslog? If yes you need to create custom dns profile and bind it to the vServer. Not sure if I got your question 100%
l
Leee Jeffries
10/04/2019, 7:44 PM@Julian Mooren I was here first on this one lol! Bob is looking to have a syslog event created each time a content switching policy is triggered.
j
Julian Mooren
10/04/2019, 7:54 PMYou again 🙂 I just was reading dns and syslog —> that’s a thing I had problems with some months ago
l
Leee Jeffries
10/04/2019, 7:54 PMHa ha, where are you based Julian? Something tells me we could spend some time swapping stories.
j
Julian Mooren
10/04/2019, 7:59 PMGermany ✌🏼At the moment I am in Helsinki waiting for my connection flight to Tokyo. I heard there is this E2EVC thing on upcoming monday and tuesday.
l
Leee Jeffries
10/04/2019, 8:03 PMThere is indeed. I'll be at E2E in Lisbon in November. Be good to bump into you.
j
Julian Mooren
10/04/2019, 8:13 PMI will skip Lisbon. Two events to short together😕 Guess we have to wait until the next europe event to swap our stories face to face.
l
Leee Jeffries
10/04/2019, 8:14 PMWill do chap. I'll be at the VDI Performance Summit in January.
2 Views