
Syslog
This page is used to collect data from system logs from MikroTik routers. All the events you have chosen in the settings (for all routers) will be displayed here.
Overview of records
In the overview, the following details are available: information about entry creation date, device ID, its IP address, the priority of a given entry and the message itself. Entries can be filtered based on router and priority (event type). You can perform a fulltext search on the list. All data can be deleted by clicking on Empty. You can sort entries by a particular column by clicking on its header.
Syslog configuration
- In Settings Syst. settings Syslog, it is possible to specify which facilities (groups of messages from routers) you want to be monitored. You can also set up filters for logging.
- For this feature to work, it is necessary to set the server_ip key correctly in Settings Syst. settings General. Enter the IP address of the ISPadmin server. All MikroTik routers will send data from their system logs to this IP address.
- The IP address + syslog port (514 UDP) has to be accessible to all routers. It is necessary to allow the syslog port (514 UDP) in the firewall configuration in Settings Syst. settings Security.
- There is a checkbox named Syslog monitor on the configuration page of each router. With it, you can deactivate the sending of data from the system logs to the ISPadmin system. By default, the monitoring of system logs is active on all routers. To activate this function, it is necessary to make use of communication through API. If a router cannot communicate via API, it is not possible to use the syslog feature.
SYSLOG icon in a router
If syslog monitoring is active on a particular router, you can see the SYSLOG icon in the details box of this router. You can click on the icon. If you do that, a page will appear with all the monitored events on a given router. Messages can be filtered based on event type, router, etc. If syslog is not active on this router (the Syslog monitor option is not checked in the settings of the router) or if syslog is disabled globally, then the icon is greyed out and it is not possible to click on it.
“Old” data are automatically deleted from the database when the value set in syslog_store_days is exceeded.