tcp syslog error

41 views

Skip to first unread message

Jose Negron

unread,

Mar 24, 2023, 2:21:45 PM3/24/23

to pwm-general

pwm version 2.0

I've configured Syslog audit in PWM to send to syslog server over tcp. Confirmed syslog server is pingable from pwm server and proper ports defined. I seem to be getting the following errors in the pwm logs.

2023-03-24T16:07:02Z, ERROR, event.SyslogAuditService, 5060 ERROR_SYSLOG_WRITE_ERROR (error while sending syslog message to remote service: java.net.ConnectException: Connection timed out: connect) fields: [java.net.ConnectException: Connection timed out: connect]
2023-03-24T16:06:11Z, ERROR, event.SyslogAuditService, 5060 ERROR_SYSLOG_WRITE_ERROR (error while sending syslog message to remote service: java.net.ConnectException: Connection timed out: connect) fields: [java.net.ConnectException: Connection timed out: connect]
2023-03-24T16:05:20Z, ERROR, event.SyslogAuditService, 5060 ERROR_SYSLOG_WRITE_ERROR (error while sending syslog message to remote service: java.net.ConnectException: Connection timed out: connect) fields: [java.net.ConnectException: Connection timed out: connect]

robert...@uwrf.edu

unread,

Mar 24, 2023, 2:41:53 PM3/24/23

to pwm-general

I'm not sure if it helps you or not, but my syslog config entry is as follows:

udp,LOGSERVERHOSTNAMEHERE,514

Syslog uses UDP by default. We have ours listening on TCP as well, but you may want to verify yours. You should be able to telnet to port 514 and send traffic that will show up in the syslog to it if it's listening on TCP.