If your environment has a syslog server or Splunk, you can configure Stratusphere to forward its logs to it. Reference article: https://www.rsyslog.com/doc/configuration/basic_structure.html#quick-overview-of-message-flow-and-objects
The configuration is simple:
- Logon to Stratusphere appliance's console as friend, then switch to root (https://liquidwarelabs.zendesk.com/entries/24782618)
- Make a backup of the syslog.conf file: cp /etc/rsyslog.conf /etc/rsyslog.conf.orig
- Run the following command to add your syslog or Splunk server address to syslog.conf. Replace <syslog or Splunk server> with your Syslog or Splunk server address:
-
echo -e "\n# send to syslog server\n*.*\t@<syslog or Splunk server>" >> /etc/rsyslog.conf
- Run cat /etc/rsyslog.conf to confirm that the settings are correctly added to the bottom of the file.
- Restart the VM or run "service rsyslog restart" to restart syslog client on Stratusphere appliance.