topic Getting syslogs from Avamar in Getting Data In

Getting syslogs from Avamar

gcusello — Tue, 23 May 2017 09:11:52 GMT

Hi at all,
I'm trying to get Avamar logs by syslog (UDP).
The problem is that every time Avamar sends an event log, I don't receive in Splunk the last event, but the previous; to have the last event Avamar has to generate a new event.
In other words there is a queue problem.
I need to understand if the problem is Avamar (probably but I'm not sure) or splunk configuration.
In the second case, it'a a problem of mine!
Has anyone encountered this problem?

Thank you in advance.
Bye.
Giuseppe

Re: Getting syslogs from Avamar

nabeel652 — Tue, 18 Jul 2017 23:05:58 GMT

Best way to get logs from Avamar is to get data from it's back-end PostgreSQL database using DB-Connect or custom scripts. That's how we are doing it.

Re: Getting syslogs from Avamar

ansif — Wed, 26 Jun 2019 08:10:56 GMT

@nabeel652 : Could you please let me know the steps required for this integration.

Re: Getting syslogs from Avamar

gcusello — Wed, 26 Jun 2019 08:39:20 GMT

Hi nabeel652,
I'm not so sure about the problem because I had it two years ago and I didn't solved it!
Anyway, I activate syslogs on Avamar and I received them in Splunk, no particular activities.
Bye.
Giuseppe

Re: Getting syslogs from Avamar

ansif — Wed, 26 Jun 2019 08:50:49 GMT

@gcusello : Just checking with @nabeel652 on his comment on best way from postgresSQL.

Re: Getting syslogs from Avamar

aaggarwal99 — Fri, 17 Jul 2020 03:52:42 GMT

Hello, Can somebody share more details on integrations with Avamar.