Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    I would like to see my logs a bit more… clear and understandable

    General pfSense Questions
    3
    3
    678
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • czar666
      czar666 last edited by

      Hi,
      My firewall logs are sent to a remote syslog server. They are coming in so everything is fine. Now I would like to see them in a more comprehensive manner.
      In the pfSense book they are talking about # clog /var/log/filter.log | filterparser.php. And that helped. But that's on the pfSense box, not on my syslog server. I added a screenshot to this post. Btw, if someone has other options to check logs, please share. I read something about Splunk, Opennms and Nagios but I admit I still have to check those options. Oh and I just want to add that it's for SOHO. So nothing too fancy or no overkill. I just want to experiment and learn. Thanks in advance.


      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        You'll need to have something parse them on the syslog server in that case. There isn't a supported way to send the formatted log entries over, just the raw data. It's easy to parse since it's CSV style data and we have the format documented: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2

        1 Reply Last reply Reply Quote 0
        • A
          AR15USR last edited by

          There is a pre-made pfELK virtual machine you could try:

          https://www.reddit.com/r/PFSENSE/comments/4dymci/i_made_a_simple_bare_bones_simple_elk_vm_for/

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy