Syslog Alert forwarding?

Hi!

I have recently gotten NTOP-NG running in my environment and am fairly pleased with it so far. What I would like to do that I have not been able to find much information on is forwarding any alerts from syslog to a syslog collector - graylog in my case. I may be able to figure this out on my own but to start with I cannot seem to find the location in the filesystem that this is logged at. I have the "syslog option" turned on in the preferences but if I search the default /var/log/syslog I find no mention of anything generated from ntop at all let alone anything related to an alert. That said - if this were ever to work I'd really like to not forward the servers entire syslog to graylog and parse it down to only what is needed from ntop.

I am running this on Ubuntu 16.04 LTS with the default rsyslog install.

Any suggestions on how to go about this?


Brian Ball
Senior Systems Administrator, IT
DL +1 (954) 538-4070
M +1 (954) 348-9192
[cid:[email protected]]<http://www.globaleagle.com/>
Teamwork | Excellence | Action | Commitment | Honor

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop