Ubuntu Centralized Syslog Standard Operating Procedure

This document details the configuration and management of the centralized rsyslog server receiving log streams from network devices.

---

1. Host Specifications

• Hostname: b1g2-ubuntu-X570-AORUS-MASTER
• IP Address: 10.10.30.11 (VLAN 30 LAB)
• Ingress Protocol: UDP / TCP Port 514

---

2. Active Syslog Log Destinations

• Cisco Switch Logs: /var/log/cisco-switch.log
• Remote Network Appliances: /var/log/remote-appliances.log

---

3. Live Log Inspection Commands

# Stream Cisco switch events live
sudo tail -f /var/log/cisco-switch.log

# Stream remote appliance logs
sudo tail -f /var/log/remote-appliances.log

# Verify listener port status
sudo ss -tulpn | grep 514